Back Cybersecuritynews

Hackers Deploy Telegram

Cybersecuritynews •Tushar Subhra Dutta • March 31, 2026

A new remote access trojan known as ResokerRAT has come to light, using Telegram’s bot API as its core communication channel to silently monitor and control infected Windows machines. What makes this threat stand out is that it does not rely on a traditional command-and-control server. Instead, it misuses a widely trusted messaging platform to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ResokerRAT: New Telegram-Based Remote Access Trojan Targets Windows Systems A new Windows malware named ResokerRAT has emerged, utilizing the Telegram Bot API for communication. This Remote Access Trojan (RAT) allows attackers to remotely control infected systems without relying on traditional command-and-control servers. Instead, it blends in with legitimate encrypted traffic, making detection challenging. The malware is designed to stealthily monitor and exfiltrate data from compromised Windows machines. Currently, there are no specific numbers of affected systems or known CVEs associated with ResokerRAT. The attack method leverages the trusted nature of Telegram, raising concerns about the misuse of widely used communication platforms. As of now, there are no reports of widespread exploitation, but the potential for targeted attacks remains significant. Security professionals are advised to remain vigilant against this emerging threat. 4 sources 49

Extracted Entities

Hackers Deploy Telegram

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (2)

Tools (1)