Malicious software distribution via SMS and Telegram reported by T2 as a potential threat
Headline: Mobile Operator T2 Warns of New SMS and Telegram Scam Involving Data Theft and Malware
In a recent announcement, mobile operator T2 has uncovered a new scam that exploits SMS and the popular messaging app, Telegram, to steal data and spread malware. Here's what you need to know to protect yourself and your device.
T2's security system has identified a new scheme where scammers send SMS messages with the text "Are these your photos?" and a link leading to a Telegram channel. The link, in turn, leads to a malicious APK file that, once installed, gains access to the smartphone's data, including the contact list.
To avoid falling victim to this scam, users should be wary of any suspicious SMS messages and Telegram communications that try to trick them into sharing verification codes, clicking malicious links, or installing malware.
Recognizing Scam Messages
Scammers often send fraudulent SMS or Telegram messages pretending to be from Telegram or your mobile operator, requesting your login verification codes or instructing you to install unauthorized apps or updates. These messages may contain urgent language, unexpected links, or ask for personal data.
Avoid Sharing Verification Codes
Never share Telegram SMS verification codes or OTPs received via SMS with anyone, even if the request seems to come from official sources. Scammers may try to hijack your Telegram or other accounts by illicitly obtaining such codes.
Verify Phone Number and App Authenticity
Ensure you have entered your phone number correctly when using Telegram and only download or update Telegram through official app stores to avoid malware. If you face issues receiving Telegram codes, follow legitimate troubleshooting steps without re-requesting codes too rapidly, as this can trigger security protocols or open attack vectors.
Beware of SIM Swap and Network Attacks
Scammers may use SIM swap fraud to intercept SMS codes and access your accounts. Mobile operators like T2 warn of such threats linked to multi-level scams that distribute malware and steal data via SMS and Telegram channels. You can mitigate this by contacting your carrier to add extra SIM protection measures like PIN codes or two-factor authentication on your mobile account.
Use Official Telegram Security Features
Enable two-step verification (password protection) in Telegram settings rather than relying solely on SMS codes, since SMS is vulnerable to interception. Avoid third-party Telegram client apps unless officially endorsed.
General Device Security
Keep your phone’s operating system and apps updated to patch vulnerabilities. Use reputable mobile antivirus or anti-malware apps as an added layer of defense against malware distributed in such scams.
Report Suspicious Activity
If you encounter any suspicious SMS or Telegram activity, immediately report it to your mobile operator (T2), Telegram support, and relevant cybersecurity authorities.
While no direct detailed advisory from T2 was found in the search results, the above steps are aligned with current best practices addressing such SMS and Telegram scams involving data theft and malware as discussed broadly in telecom fraud trends for 2025 and Telegram SMS issues.
For more specific instructions on adding SIM protection on your carrier or configuring Telegram’s two-step verification, feel free to ask!
Lastly, be cautious when checking the permissions requested by apps, and never click links from suspicious SMS. By following these guidelines, you can help protect yourself and your device from this and other similar scams.
- To safeguard against the latest data theft and malware scam that involves SMS and Telegram, users should be vigilant against any dubious communications that may pose as verification requests, malicious links, or requests to install unauthorized apps or updates.
- Enhance your cybersecurity measures by taking steps like enabling two-step verification in Telegram settings, using approved third-party Telegram client apps, keeping your device's operating system and apps updated, and employing mobile antivirus or anti-malware software.
