{"id":167268,"date":"2026-04-03T11:12:02","date_gmt":"2026-04-03T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika"},"modified":"2026-04-03T11:12:02","modified_gmt":"2026-04-03T09:12:03","slug":"neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","title":{"rendered":"Den uofficielle Telegram-klient Nekogram sendte telefonnumre til udviklerens bot.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I den uofficielle Telegram-klient Nekogram er der opdaget obfuskeret kode, som skjult sender telefonnumre p\u00e5 brugere, der logger ind i appen, til botten «@nekonotificationbot» i forbindelse med bruger-id. \u00c6ndringen for indsamling af telefonnumre findes kun i de f\u00e6rdige APK-pakker, der distribueres via Google Play, GitHub og projektets Telegram-kanal. Den \u00e6ndring, der indsamler telefonnummeret, findes ikke i kildekoden p\u00e5 GitHub eller i APK-pakken fra F Droid-kataloget. <\/p>\n

Backdoor var til stede i filen Extra.java. Det antages, at sendingen blev udf\u00f8rt fra version 11.2.3 af Nekogram, i starten kun for brugere med kinesiske numre, og derefter for alle. Programmet brugte ogs\u00e5 osint-botterne «@tgdb_search_bot» og «@usinfobot» til at identificere brugere efter deres ID, men telefonnumre blev ikke sendt til dem. \"Den <\/p>\n

Forskere har udarbejdet et java-hook og en bot, der g\u00f8r det muligt for enhver bruger at bekr\u00e6fte, om deres version af appen sender telefonnumre. \"Den <\/p>\n

If\u00f8lge de forskere, der opdagede problemet, kunne programmets forfattere have brugt de indsamlede oplysninger til at danne en database, der senere kunne s\u00e6lges til skaberne af OSINT-bots. Den bevidste skjulning af en s\u00e5dan aktivitet fremg\u00e5r af obfuskeringen af \u00e6ndringen og brugen af inline-foresp\u00f8rgsler til at sende data. Efter afsl\u00f8ringen af problemet i projektets bug-tracker erkendte Nekogram-forfatteren, at han sendte telefonnumre til sin bot, uden at give forklaring p\u00e5 \u00e5rsagen til denne aktivitet, men n\u00e6vnte, at de sendte telefonnumre ikke blev gemt eller givet videre til nogen. <\/p>\n

Derudover kan man n\u00e6vne opdagelsen af en s\u00e5rbarhed i den officielle Telegram-app. Projektet Zero Day Initiative (ZDI), som tilbyder kontante bel\u00f8nninger for rapporter om uoprettede s\u00e5rbarheder, offentliggjorde forel\u00f8bige data om s\u00e5rbarheden ZDI-CAN-30207 i Telegram, som er klassificeret som kritisk (9,8 ud af 10) og identificeret som en fjernangreb, der ikke kr\u00e6ver brugerhandlinger. Detaljer vil blive afsl\u00f8ret den 24. juli, hvilket giver udviklerne af Telegram tid til at implementere rettelsen til brugerne. <\/p>\n

Separat er der kommet information om, at s\u00e5rbarheden opst\u00e5r, n\u00e5r man \u00e5bner specielt designede animerede klisterm\u00e6rker i Telegram, og det kan f\u00f8re til, at en angriber kan k\u00f8re kode uden nogen handling fra brugerens side. Det ser ud til, at s\u00e5rbarheden er for\u00e5rsaget af en fejl i koden fra biblioteket rlottie, som h\u00e5ndterer forh\u00e5ndsvisningen. <\/p>\n

Repr\u00e6sentanter fra Telegram har udtalt, at de ikke anser det p\u00e5viste problem for en farlig s\u00e5rbarhed, da alle uploadede klisterm\u00e6rker gennemg\u00e5s p\u00e5 forh\u00e5nd. servere<\/a> I Telegram ville en s\u00e5dan kontrol ikke tillade visning af et ondsindet klisterm\u00e6rke til brugerne. Efter Telegrams udtalelse blev s\u00e5rbarhedens faregrad s\u00e6nket fra 9,8 til 7,0.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 «@nekonotificationbot» \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 APK-\u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Google Play, GitHub \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u043d\u0430 GitHub \u0438 \u0432 APK-\u043f\u0430\u043a\u0435\u043d\u0442\u0435 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 F Droid \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":167269,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167268","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Den uofficielle Telegram-klient Nekogram sendte telefonnumre til udviklerens bot | ProHoster","description":"I den uofficielle Telegram-klient Nekogram er der fundet obfuskeret kode, der skjult sender brugernes telefonnumre, der har logget ind i appen, til botten \"@nekonotificationbot\" i forbindelse med brugerens id.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Telegram-\u043a\u043b\u0438\u0435\u043d\u0442 Nekogram \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0431\u043e\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 "@nekonotificationbot" \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-03T09:12:03+00:00","article:modified_time":"2026-04-03T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/167268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=167268"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/167268\/revisions"}],"predecessor-version":[{"id":168103,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/167268\/revisions\/168103"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/167269"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=167268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=167268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=167268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}