Iran-linked spy malware used Telegram to secretly watch people around the world
Government agencies in the U.S., U.K., and Netherlands say Iranian state-linked hackers are using harmful software on Windows computers to secretly monitor dissidents, journalists, and activists. The software can use Telegram to help control the spying, including copying messages and emails, taking screenshots, and turning on the microphone.
Who is at risk
Journalists, activists, dissidents, researchers, and others who may be of interest to the Iranian government are at the highest risk, especially if they use Windows computers and Telegram.
What to watch for
Watch for unexpected computer slowdowns, strange pop-ups, microphone or camera activity you did not start, unfamiliar logins, or messages and files appearing to be accessed without your knowledge.
What to do
Immediately update your Windows computer and apps, review Telegram and email account security, turn on extra sign-in protection, and run a trusted security scan on any device you think may be affected.