Topic: Telegram scammers targeting users with malware - page 2. (Read 591 times)

Yeah, it should be malicious smart contract or just malicious website. Malware has a different meaning. Regardless the name it will still steal your funds if not carefully secured your device. Btw Sorry for the loss.

I've got some kind of malware, and almost got my email hacked on twitter/X last time searching for some new cryptocurrency projects, so probably just be careful especially on linked that is being sent on different groups, especially on Telegram where a lot of scammers are using, There was no way around it for sure, so if there are a lot of red flags and some shady things going on, Im not going to join a group on telegram.


I believed that it is not really going to be easy to be hack, like if you click a link your not really gonna get hack that easily unless you just got trick into putting your information to a fake website something like that, its a different case if the telegram is the one getting hack, in this case its probably better to avoid strangers since you can already see that the intention of someone want to have a chat with you is to trick you.

Actually not even in telegram but any kind of socials and even it came on your friends randomly because sometimes their account are the one got compromised and because you are having often conversation with them you forgot to make yourself keep more safety. Tons of people now are getting careless recently on the internet so stay vigilant. In telegram before you can filtered out people who can message to you but now you need become their premium member to access this feature.

If we can maintain an healthy practice on the use of the so called social media telegram app, then we are not likely going to to be a victim for related scam there, here are some tips we may have to follow to ensure that we make use of the opportunity on the use of social media and telegram precisely in a safety mode.

1. Don't join any group you don't know about
2. Ensure to activate 2FA on your telegram
3.  Avoid telegram links unsolicited
4. Same as well, you need to avoid downloads there
5. Don't make your contact number or email visible to the public on telegram

With these few steps, you are not going to easily be attracted to any scam related telegram attempts others are being affected of.

I also had such a problem once while learning about new crypto. First, I tried different types of airdrops and got a payment of about $30 at a time. Later, I kept it in one of my trust wallets. One day, a message came to my Telegram, and I was surprised. Later, while chatting with them, they gave me a requirement that you can earn a lot of money from there. Although I was new then, I did not understand, so I asked them to share my wallet phrase. I shared it. Later, after a few days, I saw my wallet empty. That's when I realized that they were scamming me. Then I blocked them, stopped using that wallet, and started using another.

There are many messages on Telegram to scan constantly. It is better to avoid these messages now, and I also avoid them because they are sitting in their hands. If you fall into their trap, you will lose. That is why we must proceed very carefully so that they cannot harm us and we do not fall into a trap.

Yup, there are many DM's if we join some hot groups, sometimes they use the name of platform support or core team member for kind of assistance and their other cruel methods (Cruel in terms of shity methods).

Honestly, we all know about the market and spammers and some other basic precautions we need to take, except for some of those who are opening their eyes recently in crypto industry.

I've found something stage, haha I know there's nothing strange in it but I've come to know this recently, Haha I was checking the source of the mode WhatsApp which is super famous all around my region Watsapp GB after watching a video that it contains some fishy access permissions haha and it there I've checked myself there are some crypto-related scripts and many payment permissions in simple words all possible access our smartphone can provide were there.

So My dear Watsapp GB users if you want read the deleted messages only you can go for notification data reading better than Watsapp GB.

If I get sent a link from someone I don't know or get an unsolicited offer from someone I am not expecting and I still go ahead to give this person the attention he is seeking for, even to the extent of giving him some private information I should be keeping to myself, then I should really be taking responsibility for my stupidity if anything eventually goes wrong. Some people are just too careless and only get to realise how careless they were after some damage have already been done.

Scammers are becoming more sophisticated these days and the only only way we can stay ahead of them is by avoiding strangers and strange links completely. If everyone can do this, the risks of getting scammed will reduce a bit. That is until these scammers device new means of scamming their victims effortlessly.

It’s the one way in which you can’t have access to a telegram channel no more. Not having access to the telegram phone number which could have been reset to a whole new one. Once that is done, then it’s gone to you too and that’s a whole lot of hack to reverse. Do they even do that?
Telegram have never been an easy catch or deal for users. You’ve got to be very skeptical about whatever text you receive and how to go about it. Being vigilant on those pop up notifications and proactive to tackle the security warnings when they pop up.

Telegram is full of scammers and frauds, they actually know that most users who use Telegram are somehow part of crypto community and especially the ones who've joined some crypto call groups.

The scammers first introduce themselves as insiders and sometimes they show huge balance of their accounts to gain trust of the victims. In actual they don't have any such balance but only they show it via screenshot, and that's their way to trap victims.

Only awareness can prevent the community from such scams, and the scammers will always try to find ways to scam others. They have no moral values and they don't really care about someone else. Only education and awareness is our weapon against such scammers.

I vaguely remember that incident, it's been more than a year. All I can recall was that we were trying to recover the account but were unable to do so. The logging code wasn't coming through, and the system gave us a message, "too many attempts" or something similar. I guess the hacker first hacked the account with malware and then bruteforced it in order to lock us out! We were unsuccessful that day. I can't tell whether he (friend) was able to recover that later.

Good thing i was awake when this happened so i did all stuff to prevent the hack, but i guess since i owned the tg number i can still recover the account, No? Why its not possible to your friend? Well, it doesn't happened to me yet. But why it's not possible, uhm, i guess maybe if mobile number is changed.

More than that, not only we have to be careful and distrust any link that was sent to us from strangers, we also have to be careful that any link that sent to us even from our colleagues, they might have became a victim to scam and the scammer is operating their account and sent a link to their associate contacts. We could as well ask questioned them about the link, in case its a phising and they think that was a valid link, such us a website for gifts or discounts which asked them to share the link, since not everyone is aware of internet scamming.

This is what a scammer will do to their victim. They will try to convince their victim by offering a tempting offer and asking you to join. If you are not careful, you will follow what they want that making you lose.

If a stranger gives you a link and asks you to check it, you can skip that and block him immediately. That can be a way for them to starts scamming you without you realizing. That is most common ways that scammers do it so you needs to be careful with this.

No need to bother with a stranger that you really don't know. You must be responsible with yourself and aware of any link, document, file, or anything that stranger give to you and no need to clicks that.

I thought the Telegram media auto downloads only for images/video files. So let's say even any files that auto-downloaded by telegram, are safe since they are media files (video or image) and that is impossible file could be infected by any malware?? I'm not sure.

Scary ASF!!!!!!

I believe there's a file that user downloaded if this kind of malware was able to went inside to your system.

It's not malware. It is a smart contract designed to wipe out the entire wallet to a specific address. But before it happens, the victims must connect the wallet and approve the transaction. I created a thread a couple of months ago. My entire meta mask wallet was drained once I connected my meta mask to a fake airdrop website. It took 30 seconds to wipe out my entire wallet. It was too late when I revoked the connection. These are known as crypto wallet drainers. However, I see many new media and blog articles refer to it as malware.

Telegram has been the latest home for crypto scammers. You can see how many airdrop has flooded telegram and comes with much  promises leading to many people losing there asset to scammers. Though some projects are real but majority are scam or trap to swindled fund from victims.  And the easiest way to scam people in telegram is by sendind a virus in form of a bot guiding you connect your wallet maybe internal telegram Wallet or external wallet and when this is connected anything can happen.  Because access has been granted, It is important people don't  connect  their external wallets with Hodling, to the telegram airdrop connect, to avoid swindled of fund or to avoid malwear or clipboard virus.

Something similar once happened with one of my friends. He rarely used his TG account and and one day some Russian guy somehow hacked his account. All of his personal details were private, numbers and everything and he had 2fa on. But still the hacker was able to got hold of his account. Later we (I was with him) tried to recover the account, but the recovery code wasn't coming. And at the same time the hacker was threatening us by saying he would hack all our accounts. He used all kinds of slang vulgar words like asshole,mother****. Unfortunately we couldn't recover it. We had to abandon that account though it didn't contain much information or anything.

Even in legitimate crypto telegram groups, these scammers are also there. They'll try to message the newly joined members and if that member is not aware of this tactic they do, they're likely to fall for this trap that they set. I think it's always worth noting that if you haven't messaged anyone, don't entertain it from strangers. And if they ask you to visit a link and if it asks for you to connect to your wallet, that's already a sign of it as a red flag. It's scary for those that are unaware of it if these links are automated and trying to connect automatically the wallets and if you're the kind of "yes guy" and just clicks yes/agree, you're in danger.

This is not related to malware on TG but I just got a detected login to my one account today at 5 am (was sleeping just got awake from the call) which was the very first time to happen in my tg account.
- First i got a message from tg of login code that someone trying to access my account, this is only will happen if they know your number knowing this number were including on different breached like Ledger so probably many have this number of mine on their db lists
- then after minute someone call from overseas i didnt answer of course since i didnt know who was it.
- moments later i got new message of detected login from new device "Telegram Android, 11.5.3 MBOX Android 11 (30)"
- set 2fa (received a message on this too)
- then i noticed an email was linked as well which i never did before, probably it was from that user

So what i did is;
- first go to device then terminate the session of the new device, just after i received the call (after a woke up)
- removed the email, it was snipped i can't fully see the email id just the first and last character, then i changed it to mine (first time doing that)
- add passcode
- then reset 2fa

This account is not my main tg never had any convo to strangers i just used it to test my TG bots, since i know this number was leaked to different list already but it weirded me out that just a missed call from unknown number it got successfully login to the account. Which i think that instead of passcode from the app, the call (probably from telegram) was used for the verification then logged in.
Note my privacy settings were all set to "nobody", so no one can see my phone number, calls, last seen, contact list, etc.

This is the number used with label "Malaysia"

Well, it's not necessarily to use your number. For much better than just hiding phone number is you should use another phone number that you don't use for personal reasons and It is more like a dummy phone number that you have to keep in case you need to access an OTP. Another way for scammers to know on how to contact you is when they know your telegram username like when you and a scammer are in the same group then he can send you a message. Another one is you shouldn't entertain such attempts.