Topic: Crypto Wallet Hacking through Telegram - page 2. (Read 966 times)

Had a conversation a few months ago with an administrator from a Discord group, it was the one that I almost got scammed on. He told me that it's a common occurrence, a daily thing, even in their group, and quite a few people contacted him that day, to report the scammer, which led to thousands in losses.

I also dun goofed and inserted my private key on some random website which did look legit, but it was stupid to say the least. I'm still unsure on how I fell for it, however, I was one of the lucky ones, who after conducting such a stupid move, immediately moved any funds and unstaked any assets to a new wallet.

It was a horrifying experience.

It depends how you will use telegram to be safe from hacks. You can be hack on any social media chat apps if you always clicking random links send by random user especially those who DM at most. You can set your telegram account private and auto block all those DM with links and never click any links that you will see on group chat. Just click it if it's coming from an official telegram account. You don't need to be afraid when using Telegram, Just be cautious and avoid clicking links as much possible because this what typically hackers do to scam on TG.

I have heard that a lot of crypto wallets are hacked through Telegram. Personally, this is why I don't use Telegram.
I think too many bad actors are looking for ways to exploit Telegram users. For social media, I only use Facebook and Instagram because I have heard of less incidents of hacking on those platforms.

They are everywhere.

That's why I'm not using any of them but only for certain updates with things that I've been following. But when it comes to communicating with any of those platforms.

It's always the same people that have the same tricks of telling this and that and will lead you to their scam person and links. Although I'm aware of their scam, it's annoying that they randomly come.

You are right, in fact there are many ways that they can steal your data just by clicking, because an algorithm is self-managed that searches the entire PC for what has to do with special extensions, such as .dat, and when it finds them, it may search private keys, there is now a lot of AI, which can do that search in a very short time and steal it is very easy, however this is why viruses such as Ransonware have been given, which are very common, especially in the time of 2019 and 2020, in the local Spanish section there is a very interesting thread that talks about it.

Hats off to you, for informing the community. Although I'm not using Telegram, I used to use Discord regarding some communities about staking and related services. However, I was disappointed to see that in every single group I joined, I received plenty of scam and phising attempts, one of which almost got me screwed over, which would result in quite a few thousands in losses.

As a result, I've resorted to stop using such services such as Telegram, Discord etc. due to the high risk they involve, regarding its users.

I never used telegram.  But is this different from you going to a website and clicking on it or its about the same?  I heard mixed opinions from people on say whether you visit an unsecured website... some people say its possible to get malware/keylogger that way.  Others say it is not possible or very hard because you need to not only download that file... exe file... but you also need to open it.



So for example let say your main laptop, you do all your crypto, banking and everything on it.  But you do your best to not click on dodgy links or visit dodgy websites... if you go on telegram on your laptop and get one of these messages and you download these files, is your computer compromised or not?  So if you just have windows defender and malwarebytes, that wouldn't work?  But if you have paid antivirus like kaspersky or norton, that might protect you better or its the same thing?



Also does that mean if you have online wallets on your computer, then you would get hacked as well?  Example say you have electrum or those other software wallets on your computer.  But you still need to enter your password to enter electrum.  Does that mean if your computer gets hacked, they could record all your keystrokes and everything so the moment you type in your electrum password to get in electrum to access it on your laptop, then they could literally just log in electrum themselves and send the coins easily or not?



Also this talk seems to be about android phone.  But what if its IOS?  If you have mobile wallets, can you get hacked this way as well if you using iphone?



Has any hacking like this occurred where your password manager got compromised as well?  Thus malware and keylogger seem to be the most dangerous thing to be concerned of?  Because if you get keylogger, I heard someone could record every single thing you pressed.  So essentially, they also see your screen as you type everything?

This is the most dangerous technique. There are lot of scammers that are on telegram every time and searching their victims that how to scam with peoples. I saw when we send a message in telegram group about our issue. There are lot  of peoples that pm you and told you we are from support team please tell us your issue we will resolve this. They are scammers please be aware from these persons. They get your information and tells you that send us some coins then your wallet unlocked. So, do not send us anything. They are scammers. Just block these persons. Real support managers will never PM you first.

That's the sad reality. Despite too many articles, threads, and other warnings that can be found on the web. Still, a newbie is a newbie. Without experience and very likely to get scammed. I have not also experienced but I'm a victim of those data miners that have been using websites and will eventually sell it to the market, our emails, and other data. That's why I'm also becoming careful on the websites that I sign up and once you have noticed that you're receiving random and unknown emails from spammer/hackers then you know where it came from or you should remember what's the website you are suspecting aside from telegram.

Remember that they can be smart more than us and they are so determined to succeed rather than to fail. And In fact, they do this for their living and that never make them to easily give up, they'd rather find another way to succeed.
- sending emails with link/malware
- try to communicate and make friends with people and take advantage
- some will ask for help

For now, the telegram channel is considered the den of scammers.

Hackers and scammer are always looking for new ways everytime to scam people. Telegram malware virus have been in existence for a while now. We all need to be aware of this but the beauty is you can't get scammed unless you give the scammer access. so for this reason know what to click or bot to access, as this is the way they gain access must of the time. Be careful as to what you click and access.

Clicking links is the common reason of hacking especially when it comes chatrooms, so be aware and better stay away from thus users in the telegram that keep sending messages with links and etc because you don't know what will gonna happen next. Just never trust anyone especially if its related to crypto because mostly are frauds that keep posting phishing links.

Since I started entering the crypto, I've always seen Telegram as a platform full of scammers.
I have a Telegram account as well but currently not using it for some reasons and just created one because of different projects that require you to join in their Telegram channel.

There are times as well that I receive random DM's from strangers saying that you need to download this or join this etc. and I always ignore it. The auto-download feature though is the thing that users of it must deactivate in order for them not to fall into this hacking. Well, I will still not use Telegram or there will be times but not that much so technically I'm safe from it .

I think the people most vulnerable to this attack are the people who are not running the latest version of their Anti-virus software.. because my Anti-virus will "sand-box" the executable file.. before it is executed and if it detects any funny stuff, it will block it.

The same anti-virus are running on my mobile phone and on my computer, so the actions is the same. I also get a prompt warning me that an executable file wants to be activated, so I must acknowledge if I want it to proceed.

In any way, I disabled the function just to be safe.. so thank you for that tip OP.    (Not that it is a big issue, because I use a hardware wallet and I have to confirm all transactions with a physical button press on the device) 

I hope they will but somehow, these hackers will still get prey as they will find a way to succeed. That is why we should be vigilant in our actions and carefully click links especially when it asks for login credentials as this likely ends hacking to our account. I'm not a victim of this but almost until I realize why I should have to do this as I already login my account earlier and stopped.

There are a lot of hacking mediums/tools that these hackers have made and we don't let them win.

You just need to be safe and be aware not to click any link that comes of them. If it is an unfamiliar link, you don't have to be curious with it and start clicking, just no.
There goes the hackers that will also come not just from social accounts but as well as our emails. They're almost everywhere and if you neglect the warnings being posted here, you might even be the one that will become a victim. But I wish more people are going to see these warnings so that these scammers/hackers won't have more victims.

this is the importance of reviewing the default settings in our privacy and security or data and storage features of any app that we will download and install. not only in telegram because we will never know where these hackers will come from. most of the time, we don't review those features because we are trusting that app. but even if the app is trustworthy in the market, they are also vulnerable to these malwares and other bugs, where hackers can penetrate their security protocols.

Exactly you are your own best security and having all files checked before downloading will help reduce the possibility of being hacked.
What I normally do is carry all my passwords in my head and never save any personal files online or the same password on Google doc.

More and more of these malwares are sure to be developed and protected into crypto space and the best precaution would be based on constantly taking conscious effort on what goes on, on your devices. Having a fortune right on your device makes it more than just a device but an asset of real value too. Why do people use auto downloads even? What there to miss?

On the malware, I'm thinking it's not automatically initiated as per extracting your pass codes both on custodial and non custodial wallets, including the onces used on various exchanges. We ought to watch it!

No one deliberately permits hackers to have access to his/her files, rather hackers find ways to force themselves access to your files. They do this by tricking the users to accept their malicious invites. By a way of allowing an automatic download of files from telegram is already an access granted unknowingly.
The best form of security is prevention. Both my telegram and WhatsApp apps, I have longed disabled automatic downloads for my privacy sake. I choose what I want to see and select which folder to send them after seeing, or better discard them.