WebRAT Trojan Attacks Telegram Users via Vulnerable Widgets

Kaspersky has discovered new attacks targeting Telegram users, where attackers distribute the WebRAT trojan through malicious scripts.

When visiting infected channels on a user's computer, a script automatically runs to download the virus. This program can steal messenger account data and crypto wallets, as well as hand over full control of the device to hackers.

The main cause of the vulnerability is the new HTML widgets in Telegram, for which critical security flaws were recently identified.

To protect against these threats, experts recommend the following measures:

• Do not run widgets until vulnerabilities are fixed
• Be sure to update the Telegram app to the latest version
• Avoid clicking suspicious links in channels