Telegram Premium, a popular subscription offering exclusive features such as faster download speeds, voice-to-text conversion, and no ads, is being used by attackers for malicious purposes, according to a new warning from Kaspersky. The cybersecurity firm reported a surge in phishing scams and malware attacks disguised as Telegram Premium offers, potentially compromising users’ accounts and devices.
The attacks are spreading all over the world, exploiting the Telegram Premium gifting feature and the app’s overall popularity. Fraudsters are using a variety of tactics to get users to compromise their accounts or download malware disguised as the Telegram Premium app.
The dangerous lure of free premium offers
According to Kaspersky, one of the most common scams starts with a message that purports to come from a trusted person. The message usually states: “You have been sent a gift – a premium subscription to Telegram”. It contains a seemingly legitimate link that redirects users to a phishing page asking them to log in to their Telegram account. Once users enter their credentials, fraudsters gain access to their username, password, and possibly even authentication codes, allowing them to take full control of the account.
However, phishing attempts do not stop there. Cybercriminals also use fake sweepstakes to lure victims into participating in Telegram Premium contests. These promotions often lead to phishing sites that request Telegram account credentials, which ultimately leads to the compromise of the user’s account.
Malware masquerading as Telegram Premium
Another dangerous tactic is for cybercriminals to send users a ZIP archive claiming to contain a modified version of Telegram with a built-in Premium subscription. The download links in these messages lead to phishing pages that ask users to log in, further compromising their accounts.
Even more worrisome are the malicious APK files circulating on the Internet. Scammers offer these modified versions of apps claiming that they unlock premium features of Telegram for free. However, these APKs are actually malware designed to infect the victim’s device and steal personal data.
Kaspersky noted that phishing schemes related to Telegram Premium have been observed in several languages, indicating that attackers are operating on a global scale. Although the scam has been most prevalent in certain regions, experts warn that it could spread to other territories, especially during the holiday season, when many people are more likely to fall for offers that seem too good to be true. reliable solution to protect yourself,” Svistunova advised.
How to protect yourself
To protect against these growing threats, Kaspersky recommends taking several proactive steps:
- Check links: Always check links in messages, especially those offering gifts in Telegram Premium. Scammers can use links that look legitimate but redirect to phishing sites.
- Use official channels: Buy subscriptions directly on the official Telegram platform or through a special bot. Avoid third-party sources that may be fraudulent.
- Enable two-factor authentication (2FA): Adding an extra layer of security to your Telegram account will help protect you even if your credentials are compromised.
- Avoid unofficial apps: Use official Telegram apps to minimize the risk of downloading malware.
- Read the official security tips: Kaspersky’s guide to setting up Telegram security and privacy will help you stay ahead of new threats.
