Fake Telegram X app infects tens of thousands of Android devices with backdoor

As reported by HackRead, a sophisticated backdoor malware, identified as Android.Backdoor.Baohuo.1.origin, has infected tens of thousands of Android devices by being embedded within unofficial versions of the Telegram X messaging application.

The malware was distributed through third-party app catalogs and suspicious websites, bypassing official app stores. Once installed, it grants attackers extensive control over a user's Telegram account, enabling them to join or leave channels, hide login activity, and conceal messages, all with the aim of maintaining long-term, undetected access. Doctor Web reported approximately 58,000 infected devices across nearly 3,000 models, including smartphones, tablets, smart TVs, and in-car systems. This broad targeting highlights the risks associated with installing APKs outside the Google Play Store.

The report also noted a 65% increase in banking trojans and the reappearance of the Joker and FakeApp malware on Google Play. The exploitation of popular messaging apps like Telegram X underscores the persistent threat of social engineering and the dangers of using unofficial software sources.

Source: HackRead