Scammers are using a new scheme to steal accounts of users of the Telegram messenger.
The attackers are sending messages to users asking them to “support a relative (friend) in a competition.” In the message, users are asked to follow the link “to vote.” After following the link, the user is taken to a phishing resource with a description of the site, brief information about the vote, participants, prizes, and general information for voting.
Next, when voting for a certain participant, the phishing resource asks the user to log in to the Telegram messenger to confirm their identity, where they must enter their subscriber number, as well as the received code for authorization.
In fact, after providing the specified data, the user provides access to their messenger, or loses access to it altogether.
The main goal of the attackers is to send the maximum number of such messages so that as many people as possible follow the links, thus providing access to their accounts.
As a rule, the user cannot understand that his account has been accessed, unless he is informed about it by friends or relatives who have received a message with a phishing link on his behalf.
In cases of following such links, it is necessary to check for third-party access to your profile. To do this, follow the path: “Settings” – “Privacy” – “Active sessions” (here are displayed the phones, computers and browsers from which your “Telegram” was logged in, as well as their location). Then close all suspicious active sessions.
Next, you need to set (change) the cloud password (image 10-11), and if you don’t have one, set it. To do this, go to the “Settings” — “Privacy” — “Cloud password” section and follow the messenger’s instructions.
If the attackers have managed to change the password, you need to reset it. To do this, go to the “Cloud password” section and click on “Forgot your password?”.
In cases where you specified an email address when setting the password, you will receive a letter with instructions on how to restore access (if you did not specify an email address, the password will be reset in seven days, after which you will be able to log into the messenger, close other people’s sessions and change the password).
You can also contact telegram technical support via the link, which will allow you to return your account as soon as possible.
Telegram Account Security Tips.
To ensure the security of your Telegram account, we strongly recommend that you do the following:
- Set up a cloud password.
A cloud password is a reliable security measure, as it is stored in the cloud, not on your device, making it much more difficult for intruders to access it. Detailed instructions on how to set it up are provided in the previous section. Pay attention to the complexity of the password – it should be difficult to predict. Save the password in your memory or write it down in a safe place. For convenience, Telegram will prompt you to enter a hint word when creating a password. Each time you log in to your account from a new device, in addition to the code received by SMS, you will need to enter a cloud password. - Ensure email security.
Set a strong password for accessing your email and activate two-factor authentication. This will significantly reduce the risk of hacking your email and gaining access to Telegram codes and other personal data. - Set a password code in Telegram.
The code is an additional level of protection for your Telegram account. To set it, go to “Settings” – “Privacy” – “Passcode” and select a four-digit code. - Avoid malicious links.
Do not click on suspicious links or open archives in messages from unfamiliar accounts – this may be an attempt to take over your data. - Control access rights.
If you manage a Telegram channel, promptly remove administrators who no longer work with you. Instruct current administrators on the need to protect their accounts, as hacking any of them can lead to unauthorized access to channel management.
