A New Malware Will Steal From Telegram

By xuanling11 | Crypto Learning | 27 Dec 2021

Hackers are being more and more sophisticated. Particularly in the crypto field, hackers can imbed their software and steal information. There is a new malware that can steal from your wallet without you even knowing your wallet has been hacked. 



Disabled auto-downloading in Telegram settings to avoid the unaware download of malware and got hacked of your crypto wallet.


Here is a 1 min summary of the article if you want to skip the reading.



This Malware steals private information from users and specifically targets crypto wallets and user accounts credentials. The software may contain multiple credential-stealing functions, domain detection, and computer fingerprinting to collect users’ credentials. It can also screenshot users’ credentials and automatically send them back to hackers. You can read the full report on how the code attack users here.


Handle @Smokes Night

Telegram group Smokes Night was reported to propagate the malware Echelon and steal credentials from user accounts and crypto-wallets. There are no other incidents revealed in the current time.


Possible places to exploit

According to the report,  here are platforms and crypto wallets that potentially be the target:


Exploited Platforms:

  • Discord
  • Edge
  • FileZilla
  • NordVPN
  • OpenVPN
  • Outlook
  • Pidgin
  • ProtonVPN
  • Psi(Jabber)
  • Telegram
  • TotalCommander




Aimed Digital Currency Wallets:

  • Armory
  • AtomicWallet
  • BitcoinCore
  • ByteCoin
  • DashCore
  • Electrum
  • Exodus
  • Ethereum
  • Jaxx
  • LitecoinCore
  • Monero
  • Zcash


Possible upgrade with zero clicking

The current version of software may need to click and install. However, it may evolve into zero-click with auto installation functionality to make a 0 click attack.


What you can do


If you are using Telegram, please turn off the auto-downloading functionality. You can reference how to turn off the auto-downloading here.

For iOS

For iOS


For Android


For web version

In Conclusion

Do not open any suspicious download zip files. Try to have your virus scan software active during your internet connection. Be sure to turn off your auto-download function on any chat apps.

This article is also published in Cryptologist as parnership publication.

Photo by Michael Geiger on Unsplash
Note: the post was shared on multiple platforms here.

You can refer my previous article lists here
Digital Commodities- the Unlimited Resources of Commodities Has Born
Universal Income in Crypto Way
DeFi 1.0 is Officially Dead - Welcome to DeFi 2.0
NFT Has a New Purpose
How Many Ads Are Too Much - Floki Inu Ads Got Backfire
Metaverse - Second Life Era
Bitcoin ATM Adoption and Its Potential Security Vulnerabilities
When Corporations Are Running By Everyone
The Fundamental Value Is Irrelevant
Coinbase At Huge Reputation Crisis
CBDCs' Flaw Design
Regulations Start Hitting Crypto Exchanges
From Bitcoin Standard To Zero-Knowledge Proofs - Decentralization 2.0
Shiba Hits 1 Million Users (Army) Milestone: What is Next?
How To Avoid Crypto Scammers
Crypto Philanthropy
Shiba Game - When Meme Meets Metaverse
Twitter CEO Steps Down - A Full-Time Bitcoiner
Change of Macroeconomy Landscape
CBDC Is Losing The Game
Crypto AWS
Doge The Future
El Salvador's Bitcoin
Market Sentiment Has Changed
Brief History of Ethereum and How Ethereum 2.0 May Over Promise
Crypto Is Getting Real
Who Cares If Craig Wright Is The Real Satoshi
Institutional Investors vs. Whales
What Happened In BadgerDao
A Proposal To Move Bitcoin Mining PoW Away
IMF Keep Crying Out, Crypto Adoption Keep Accelerating
Dogecoin Is Back to Top 10 But The Moon Shot Is Looming
How to Avoid The New Wallet Scam
Defi Enters To Crypto Bond Phase
What Types of Metaverse You Want
Global Regulations Are Coming Or Can They
IMF Did Have A Plan to Run Global Regulations
Doge Starts Moving
Disclosure: The article was written by a delusional author who is possibly a nut job without any questions whatsoever about expertise in the subject matters. You should not believe any words this author wrote or you may experience similar symptoms or even possibly become a nut job.


How do you rate this article?



Check out https://www.xuanling11.com/.

Crypto Learning
Crypto Learning

All article was written by a delusional author who is possibly a nut job without any questions whatsoever about expertise in the subject matters.

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.