Scammers exploit Telegram slowdown to hijack accounts
Scammers have created a Telegram bot that supposedly bypasses the messenger's slowdown feature and are using it to hijack user accounts. To access the bot, users must confirm they are not a robot, but clicking the “Confirm” button effectively consents to sharing their phone number with the bot.
Next, under the guise of verifying the user, scammers ask to enter a five-digit code allegedly sent by the bot. In reality, this is the Telegram authorization code; entering it into the bot’s form instantly grants attackers access to the account, unless the user has enabled a “cloud password,” experts warn.
This scheme poses a serious risk to users who do not have additional account protection activated. It is crucial to remain cautious about external bots and never enter codes received from unknown sources.