ToxicEye is initially spread via phishing emails containing a malicious. ToxicEye is managed by attackers over Telegram, communicating with the attacker's server and exfiltrating data to it. A RAT is a type of malware that provides the attacker with full remote control over a PC. The warning from CPR comes after it tracked over 130 cyber-attacks within the past three months that used a remote access trojan (RAT) dubbed ‘ToxicEye'. Recipients of the malware are subjected to, file system control, where files and processes can be deleted/killed data leaks, where data can be copied from the PC clipboard, or audio and video recorded via the PC's microphone and camera and file encryption - ransomware installation. CPR says the service is being used as a command and control system to distribute malware to organisations.Įven when Telegram is not installed or being used on target machines, hackers can send malicious commands and operations remotely via the instant messaging app using a Telegram ‘bot' embedded in the malware. Telegram has more than 500 million active users.

Hackers are using instant messaging app Telegram for remote control and distribution of malware, according to Check Point Research.ĬPR tracked over 130 cyber attacks that used ToxicEye malware, managed over Telegram in past three months.

What is the telegram app used for