Product
Telegram Bot API
- First Reported
- Mar 5, 2026
- Latest Reported
- Jun 23, 2026
Reported Context (2)
- Command-and-control runs over a Telegram Bot API polling loop, with AES-GCM payloads over certificate-pinned TLS. macOS.Gaslight Uses Prompt Injection to Disrupt AI-Assisted Malware Analysis
- Small Sieve backdoor: Telegram Bot API for C2, persists via Outlook/Microsoft registry run key Report Maps Threat Actors and Exposure Risks for US ICS/OT Systems
Malware (18)
People (1)
Threat Actors (28)
MITRE ATT&CK (24)
Vendors (14)
Products (27)
Tools (12)
Industries (12)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.