Scammers have begun to massively attack iPhone and iPad owners in Russia through modified versions of the Telegram messenger. Attackers block devices and demand ransom, according to the cybersecurity company F6.
The scheme is based on rumors of a possible blocking of Telegram. In advertising, users are promised "built-in VPN", "anonymous number", "incognito mode" and "Premium without payment". Experts have identified malicious builds under the names DarkGram, HoloGram, ToxicGram, HakoGram, AstroGram and Doxogram.
Victims are sent a bot with instructions to install the mod by logging in under someone else's Apple ID, since the application is not in the official Apple store. The user enters their login and password, after which the attackers block the account and the device itself. A demand to contact the extortionists appears on the screen.
They demand from 10 thousand to 60 thousand rubles for unlocking. The amount depends on the cost of the device. According to F6, from February 9 to March 5, the damage to Russians exceeded 2.9 million rubles. Some of the attacks followed a similar pattern through TikTok modifications.
