Hackers used Telegram to spy on people through infected Windows computers
A spying program called HEAVYGRAM is being used to secretly monitor Windows computers, with attackers using Telegram to send instructions and collect stolen information. It has reportedly been aimed at journalists, Iranian dissidents, and other people of interest since 2023.
Who is at risk
People using Windows computers who may be targeted for monitoring—especially journalists, activists, dissidents, and anyone handling sensitive information—are most at risk.
What to watch for
Watch for unexpected messages or files, unusual computer slowdowns, unknown programs opening at startup, or signs that your accounts or private files are being accessed without your permission.
What to do
Immediately update Windows and security software, avoid opening unexpected files or links, and run a full device scan on any Windows computer that may have been exposed.