Wrote this basic C2 implant that gets commands from a telegram bot, executes it, and posts back the output. Inspired by the GitHub equivalent in the CETP course from @alteredsecurity.bsky.social youtu.be/Lp2Rd6TcB8Y #redteam #c2 #telegramc2
Telegram C2 Demo
YouTube video by 0x4ndr3
youtu.be
March 17, 2026 at 12:19 PM
Wrote this basic C2 implant that gets commands from a telegram bot, executes it, and posts back the output. Inspired by the GitHub equivalent in the CETP course from @alteredsecurity.bsky.social youtu.be/Lp2Rd6TcB8Y #redteam #c2 #telegramc2
Group-IB uncovered Iranian HEAVYGRAM malware campaigns. The HEAVYGRAM malware abuses Telegram channels for command execution and data theft.
#Heavygram #Malware #HandalaHack #TelegramC2 #Cyberespionage
#Heavygram #Malware #HandalaHack #TelegramC2 #Cyberespionage
HEAVYGRAM Malware Abuses Telegram for Cyberespionage
At a Glance Attribute Details Malware Family HEAVYGRAM (associated with CRUDEEXCLUDE) Threat Actor Handala Hack (suspected persona of Void Manticore / MOIS) Target Victims Iranian dissidents, Farsi-language journalists, and academic targets Delivery Vector Social engineering, malicious scripts, and trojanized installers Key Capabilities Screen recording, Telegram session theft, remote command execution Source Group-IB Threat Intelligence Executive Summary Security researchers discovered 29 new samples of the HEAVYGRAM malware targeting dissidents and reporters.
securityonline.info
September 22, 2026 at 6:08 AM
Group-IB uncovered Iranian HEAVYGRAM malware campaigns. The HEAVYGRAM malware abuses Telegram channels for command execution and data theft.
#Heavygram #Malware #HandalaHack #TelegramC2 #Cyberespionage
#Heavygram #Malware #HandalaHack #TelegramC2 #Cyberespionage
TELESHIM malware hits Middle East governments and abuses Telegram C2 to hide traffic. Zscaler ThreatLabz found the new backdoor and its tooling.
#TELESHIM #Malware #TelegramC2 #Cybersecurity #ThreatLabz #MiddleEast
#TELESHIM #Malware #TelegramC2 #Cybersecurity #ThreatLabz #MiddleEast
TELESHIM Malware Targets Middle East Governments Through Telegram
At a glance Threat actor Unnamed group with links to East Asia (moderate-to-high confidence) Activity type Targeted intrusion and suspected espionage; DLL side-loading and Telegram C2 Targets / victims Government entities in the Middle East Scale Multiple infected hosts; heavy activity July 7–9, 2026 Law-enforcement status No public attribution to a known APT; no arrests or charges reported Source
securityonline.info
July 27, 2026 at 8:02 AM
TELESHIM malware hits Middle East governments and abuses Telegram C2 to hide traffic. Zscaler ThreatLabz found the new backdoor and its tooling.
#TELESHIM #Malware #TelegramC2 #Cybersecurity #ThreatLabz #MiddleEast
#TELESHIM #Malware #TelegramC2 #Cybersecurity #ThreatLabz #MiddleEast