BlockBeats reported that on May 7, SlowMist Chief Information Security Officer 23pds said that users need to be alert to the risk of Telegram accounts being taken over by malicious phishing links on Telegram.
Recently, a risk was discovered in the well-known chat tool Telegram's link identity function. Malicious users send specific links to victims through private chats. Once the victim clicks on this link, their Telegram account may be taken over.
Currently, both mobile application iOS and Android clients support link identity authentication, so both have this risk.
Mitigation method: Log in to Telegram via QR code, open Telegram on your phone, go to Settings > Devices > Link Desktop Devices, and scan the phone to confirm login. Refuse to log in using shortcuts such as link identity.