Cybersecurity experts have discovered a massive fraud operation that distributes Android malware, runs cryptocurrency scams, and poses as well-known firms using Telegram’s Mini App feature.
According to a recent CTM360 story, the technology, called FEMITBOT, leverages Telegram bots and embedded Mini Apps to create realistic, app-like experiences right within the messaging platform. It is based on a string identified in API answers.
Lightweight web apps called Telegram Mini Apps operate within Telegram’s integrated browser, allowing users to access interactive tools, payments, and account access without ever leaving the app.
A CTM360 study that was provided with BleepingComputer claims that the FEMITBOT platform is utilized for a variety of scams, such as phony financial services, streaming websites, cryptocurrency platforms, and AI tools.
Threat actors used the same backend infrastructure with several domains and Telegram bots in multiple campaigns read more about Telegram Mini Apps abused for crypto scams Android malware delivery.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.