Хочете будувати кар’єру в Data Science та AI? Vodafone Big Data Lab відкриває новий набір —>
Оксана СтепураHot News
11 November 2026, 12:27
2026-11-11
"Has been hacked for the second time in a week, even with two-factor authentication." Users are massively complaining about losing their Telegram accounts. How can you lose an account even with additional protection?
Threads reports numerous cases of Telegram account hacks. Users report being logged out of the messenger on all devices and even deleting profiles they've used for years. Some of them claim they lost access even though they had two-factor protection and didn't click on suspicious links.
Threads reports numerous cases of Telegram account hacks. Users report being logged out of the messenger on all devices and even deleting profiles they've used for years. Some of them claim they lost access even though they had two-factor protection and didn't click on suspicious links.
Content
What do users say?
One Threads user said she suddenly lost her Telegram account, which she had been using for 10 years. According to her, the messenger logged out of the account simultaneously on her phone and laptop, and she was unable to regain access.
View on Threads
Another user complained that her work Telegram was hacked for the second time in a week, despite having two-factor authentication enabled. She said she didn't open any suspicious links or give out her phone number to anyone.
View on Threads
And another user, under the nickname vika_koshcheienko, reported that she had been receiving login confirmation codes for seven hours. According to the woman, she did not see any unknown active sessions that could be completed. Koshcheienko claims that the attackers even changed the email address associated with her profile. At the same time, two-factor protection was also enabled on her account.
View on Threads
"After 7 hours, it was deleted from all devices. I deleted my account, created a new one yesterday, and literally today it was hacked again," she said.
"Chat is being moved to a new group." What kind of messages appear in Telegram?
Meanwhile, suspicious messages about the alleged relocation of chats are spreading in Telegram groups. Participants are told that the group is being moved and are asked to click on a link so as not to lose it. Then, they need to click the "Run" button.
Presumably, instead of a new chat, the user may end up in a fraudulent bot or malicious application. There, under the guise of verifying that the person is not a robot, they may be asked to enter a verification code.
Once the profile is hijacked, the scammers can send similar messages to other groups on behalf of the victim user, thus spreading the scheme further.
"Hello, is that you in the video?"
Another known scheme is a message like “Hello, is that you in the video?” with an attached file that actually has the APK extension. Since an APK is an Android application installation file, if a user installs the malicious app and grants it the necessary permissions, it can access sensitive data, including SMS and verification codes.
Such attacks have already been recorded by cybersecurity experts. For example, the Mamont Trojan has already been reported to be spreading via instant messengers. It can intercept SMS and use infected devices for further distribution.
How can attackers hijack an already authorized Telegram session?
Attackers can also steal data from an already authorized Telegram session, and then they will not need a password or confirmation code. This is possible if malware has entered the computer. It can find the files where Telegram Desktop stores login data and transfer them to hackers. Using this data, attackers can access the account without re-authorization.
On October 30, the Cyber Police published instructions for those who have lost access to Telegram.
Instructions from the Cyber Police
On October 30, the Cyber Police published instructions for those who have lost access to Telegram.
If access has already been lost, you should:
Contact Telegram support with your phone number, profile link, and a description of the problem.
Warn your friends through other communication channels so that they do not open suspicious messages from your name.
Change passwords for services whose data could be stored in correspondence.
Try logging in to your account again. If you are successful, check your active sessions and security settings.
Also, to avoid hacking, it is recommended to enable two-factor protection and disable automatic file downloads.
Previously, dev.ua wrote about how scammers use personalized birthday greetings to steal Telegram accounts. Marketer Oleksandr Sukhomlyn spoke about a suspicious greeting he received in the messenger and investigated the mechanism of the scheme.
«Росіяни завжди хочуть когось трахнути». Микита Книш розповів FT, як українські хакери видавали себе за дівчат, зламували камери відеоспостереження та россайти заради перемоги
Видання Financial Times опублікувало статтю про роботу українських хакерів у війні проти рф, засновану на розмові з українським білим хакером Микитою Книшем. Він, як і сотні інших хакерів, допомагає боротися із російськими загарбниками в кіберпросторі. Наводимо адаптований переклад матеріалу.
Британець створив інструмент для злому Starlink з деталями на $25. Чи виведе він термінал з ладу? WIRED
Британський дослідник безпеки Леннерт Воутерс створив modchip — спеціальний інструмент злому, який можна приєднати до антени Starlink. Готові деталі для нього коштують $25.
10 серпня на конференції з безпеки Black Hat у Лас-Вегасі дослідник розкрив подробиці збоїв у терміналах Starlink та розповів про те, як серія апаратних недоліків дозволяє зловмисникам отримати доступ до системи і запустити власний код на пристроях. Про це написав WIRED.
