Telegram Phishing Attack Exploits Authentication Workflows for User Session Hijacking

A new phishing campaign targeting Telegram users has emerged, utilizing the platform's authentication workflows to hijack fully authorized user sessions. This attack differs from traditional methods by avoiding password harvesting and instead manipulating legitimate login processes. Users of Telegram are at risk as attackers gain access to their accounts without needing to steal credentials directly.