Scammers on Telegram are spreading a virus called Mamont, which is disguised as a video. If opened, it installs an application on the phone that steals push notifications, SMS, and photos from the gallery. This was warned by the Department for Organizing the Fight Against Illegal Use of Information and Communication Technologies of the Ministry of Internal Affairs of Russia.
Most often, attackers send files, accompanying them with the question: "Is this you in the video?", also the word "video" in various variations is used in the file name.
When this file is opened, an extension carrying the Mamont Trojan is installed on the device. In addition to stealing data, the application can automatically send infected files to all contacts in the messenger. The files have the .apk extension.
The goal of the attackers is to gain access to payment methods. However, they can use personal data and any other information from the smartphone for their illegal purposes.
No matter who sends you a message with an unknown file, you should never open it!
.apk is the format of the Android Package Kit archive file, which is used to distribute and install applications on devices with the Android operating system.
Earlier, the Ministry of Internal Affairs of Russia warned about another fraud scheme that became possible in Telegram. This concerns fake votes. If a user clicks on the link, they risk losing their account on this social network.
Read more on the topic:
Scammers use Pepe the Frog to deceive Russians on Telegram
The Central Bank warned Russians about a new type of fraud
Data leaks in Russia in 2024: the availability of information devalues stolen databases
Russians were explained why you should not transfer money by phone number to strangers
Spies and steals data: a new malicious program Zagrebator has been discovered in Russia
