Kaspersky warns of rising Telegram Premium phishing scams and malware threats

financialexpress.com:

Telegram Premium, a popular subscription offering exclusive features like faster download speeds, voice-to-text conversion, and an ad-free experience, is being used for malicious reasons by cyber attackers, according to a new warning from Kaspersky. The cybersecurity firm has reported a surge in phishing scams and malware attacks disguised as offers for Telegram Premium, potentially putting users’ accounts and devices at risk.

The attacks have been spreading globally, exploiting the Telegram Premium service’s gifting feature and the general popularity of the app. Scammers are using a variety of tactics to trick users into compromising their accounts or downloading malicious software disguised as a Telegram Premium app.

According to Kaspersky, one of the most common scams begins with a message that seems to come from a trusted contact. The message typically claims: “You’ve been sent a gift — a Telegram Premium subscription.” It includes a seemingly legitimate link that redirects users to a phishing page, prompting them to log in to their Telegram account. Once users enter their credentials, scammers gain access to their login details, password, and potentially even authentication codes, enabling them to take full control of the account.

However, the phishing attempts do not stop there. Cybercriminals are also using fake giveaways, where victims are lured to participate in Telegram Premium contests. These promotions often lead to phishing sites that request Telegram account credentials, eventually compromising the user’s account.

Another troubling tactic involves cybercriminals sending users a ZIP archive claiming to contain a modified version of Telegram with a built-in Premium subscription. The download links in these