Fake Telegram Download Site Distributes Stealthy Malware

A new malware campaign is targeting Telegram users through a typosquatted website, telegrgam[.]com, which closely resembles the official Telegram download portal. The site offers a trojanized installer named tsetup-x64.6.exe, tricking users into downloading malicious software. Once executed, the installer initiates a multi-stage attack chain, compromising affected systems. This campaign exploits user trust and could potentially impact a large number of Telegram users who mistakenly visit the fraudulent site. The attack method relies on social engineering tactics to deceive users into downloading the malware. Currently, there are no specific numbers on the number of affected users or systems. Security experts are advising caution when downloading software from unofficial sources. The situation is ongoing as the malicious site remains active.

Key Points: • A fake Telegram download site is distributing malware via a typosquatted domain. • The malicious installer masquerades as a legitimate setup file for Telegram. • Users are advised to avoid downloading software from unofficial sources.