This isn’t a leak, but…
BREAKING: Nekogram is secretly sending your phone numbers to the developer
The backdoor is hidden in the http://Extra.java
file, which differs from the template uploaded to the repository. The obfuscated code sends data as an inline request to the @nekonotificationbot, leaving no trace.
More info about the backdoor: https://github.com/Nekogram/Nekogram/issues/336 (locked by Nekogram devs)
To validate this, we made a PoC: an LSPosed module that replaces the bot ID and username to ours so all requests are going to it. That way, we confirmed that the phone numbers are being collected. Every. Login.
The PoC is available here: https://github.com/RomashkaTea/nekogram-proof-of-logging
What should you do?
1. Report the app on Play Store: https://play.google.com/store/apps/details?id=tw.nekomimi.nekogram
2. Report the repository on GitHub: https://github.com/Nekogram/Nekogram
3. Delete the app and stop using unofficial Telegram clients
READ FULL ARTICLE: This article originally appeared on Mystic Leaks
—❗️🇺🇸/🇮🇷 Iran’s Foreign Ministry Spokesman, Ismael Baqaei: – Iran is close to reaching an understanding…
🚨BREAKING: Police Identify Idaho Shooter As 24-Year-Old Chad Williams; The Official Toll Of The Twin…
🇺🇸⚡️🇮🇷 Timeline of Trump’s War on Iran 🔹 Jan 18: “Iranian patriots, help is coming.…
Were In The 5th Month Of A 4 Week War That We Won In 2…
Thomas Massie: Don’t Fall For The Fake Fox/GOP Outrage. Two Weeks Ago The House Passed…
Breaking: Military Personnel In The Middle East Are Being Forced To Surrender Cell Phones -…
This website uses cookies.