{"id":166048,"date":"2026-03-24T23:12:53","date_gmt":"2026-03-24T21:12:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki"},"modified":"2026-03-24T23:12:53","modified_gmt":"2026-03-24T21:12:53","slug":"v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki","title":{"rendered":"Dans Telega, un client alternatif de Telegram, une vuln\u00e9rabilit\u00e9 de type MITM a \u00e9t\u00e9 mise en \u00e9vidence.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Une \u00e9tude a \u00e9t\u00e9 publi\u00e9e, affirmant que Telega, le client alternatif de Telegram, contient des modifications permettant de r\u00e9aliser une attaque MITM et d\u00e9sactivant des \u00e9l\u00e9ments cl\u00e9s de la cryptographie de Telegram. Le client Telega utilise le code de l'original client Android de Telegram, distribu\u00e9 sous licence GPLv2, mais ne r\u00e9v\u00e8le pas les modifications apport\u00e9es, contrairement aux exigences de la licence.    <\/p>\n<p>La conclusion sur la possibilit\u00e9 d'intercepter le trafic des utilisateurs repose sur plusieurs d\u00e9couvertes techniques identifi\u00e9es apr\u00e8s la d\u00e9compilation du package APK, l'analyse des biblioth\u00e8ques et l'examen des appels r\u00e9seau :  <\/p>\n<ul>\n<li class=\"l\"> Le client Teleg\u0430 redirige le trafic via sa propre infrastructure : lors du d\u00e9marrage, il se connecte \u00e0 l'adresse api.telega.info\/v1\/dc-proxy et re\u00e7oit une liste JSON des \u00ab centres de donn\u00e9es \u00bb, qui remplacent les adresses officielles de Telegram. En fait, cela oblige le client \u00e0 \u00e9tablir des connexions non pas avec l'original. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-dusseldorf\/\" title=\"serveurs tr\u00e8s charg\u00e9s\" data-wpil-keyword-link=\"linked\">serveurs tr\u00e8s charg\u00e9s<\/a>, mais via un proxy Telega. Ce comportement peut \u00eatre expliqu\u00e9 par une tentative de contourner les blocages d'acc\u00e8s direct aux serveurs de Telegram. En utilisant les cl\u00e9s publiques officielles de Telegram, les proxies ne peuvent que rediriger le trafic chiffr\u00e9 vers <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/\" title=\"serveurs\" data-wpil-keyword-link=\"linked\">serveurs<\/a> Telegram, mais ne peuvent pas acc\u00e9der au contenu sans les cl\u00e9s priv\u00e9es utilis\u00e9es sur les serveurs officiels de Telegram.\n<li class=\"l\"> Dans l'assemblage, une cl\u00e9 RSA ouverte suppl\u00e9mentaire a \u00e9t\u00e9 d\u00e9tect\u00e9e, qui n'est pas pr\u00e9sente dans les clients officiels de Telegram. Lors de l'\u00e9tablissement de sessions chiffr\u00e9es avec ses serveurs, Telega peut utiliser sa propre cl\u00e9 publique, pour laquelle la cl\u00e9 priv\u00e9e correspondante est connue.\n<li class=\"l\"> Le remplacement des adresses, coupl\u00e9 \u00e0 l'utilisation de sa propre cl\u00e9 publique, permet de r\u00e9aliser une attaque MITM, qui donne la possibilit\u00e9 de lire tous les messages entrants et sortants dans le chat, de consulter l'historique des conversations, de modifier le contenu des messages et de r\u00e9aliser toute action sur le compte de l'utilisateur sans sa participation.\n<li class=\"l\"> Les m\u00e9canismes PFS (Perfect Forward Secrecy) et le support des chats secrets E2E dans le client sont soit d\u00e9sactiv\u00e9s par d\u00e9faut, soit g\u00e9r\u00e9s par une configuration distante accessible via le m\u00eame dc-proxy (le client ignore les chats secrets et cache les \u00e9l\u00e9ments UI pour leur cr\u00e9ation).\n<li class=\"l\">  Des filtres supprim\u00e9s\/listes noires ont \u00e9t\u00e9 identifi\u00e9s dans le code (requ\u00eates \u00e0 api.telega.info\/v1\/api\/blacklist\/filter), permettant de cacher des cha\u00eenes, des profils et des chats c\u00f4t\u00e9 client par d\u00e9cision. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/dts-los-angeles\/\" title=\"de serveurs\" data-wpil-keyword-link=\"linked\">de serveurs<\/a>.  <\/ul>\n<p>Telega se positionne comme un \u00ab client Telegram construit sur la base du code ouvert du messager \u00bb, qui peut \u00eatre utilis\u00e9 sans <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/vpn\/\" title=\"VPN\" data-wpil-keyword-link=\"linked\">VPN<\/a>, et sur la page du projet, il est indiqu\u00e9 que \u00ab toutes les informations sont prot\u00e9g\u00e9es par le chiffrement de bout en bout de Telegram. Auparavant, le canal Telegram Telega avec plus de 5 millions d'abonn\u00e9s avait \u00e9t\u00e9 v\u00e9rifi\u00e9, mais au moment de la r\u00e9daction de cet article, la v\u00e9rification est absente. Le bot d'autorisation Telega compte plus de 6 millions d'utilisateurs mensuels.<br \/>\n<br \/>Source : <a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=65063\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Telegram, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0437\u0430\u0449\u0438\u0442\u044b Telegram. \u041a\u043b\u0438\u0435\u043d\u0442 Telega \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u043e\u0434 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e Android-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Telegram, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0439 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2, \u043d\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043d\u043e\u0441\u0438\u043c\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0438. \u0412\u044b\u0432\u043e\u0434 \u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u0435\u043b\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0430\u0445\u043e\u0434\u043e\u043a, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-166048","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Telegram, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0437\u0430\u0449\u0438\u0442\u044b Telegram.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412 Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Telegram, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f MITM-\u0430\u0442\u0430\u043a\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Telegram, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0437\u0430\u0449\u0438\u0442\u044b Telegram.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-03-24T21:12:53+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-03-24T21:12:53+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Une possibilit\u00e9 d'attaque MITM a \u00e9t\u00e9 identifi\u00e9e dans Telega, un client alternatif de Telegram | ProHoster","description":"Une \u00e9tude a \u00e9t\u00e9 publi\u00e9e, affirmant que Telega, un client alternatif de Telegram, contient des modifications permettant de r\u00e9aliser une attaque MITM et d\u00e9sactivant des \u00e9l\u00e9ments cl\u00e9s de la cryptographie de Telegram.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 Telegram, \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f MITM-\u0430\u0442\u0430\u043a\u0438 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e Telega, \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Telegram, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c MITM-\u0430\u0442\u0430\u043a\u0443 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0437\u0430\u0449\u0438\u0442\u044b Telegram.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/v-telega-alternativnom-kliente-telegram-vyyavili-vozmozhnost-soversheniya-mitm-ataki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-03-24T21:12:53+00:00","article:modified_time":"2026-03-24T21:12:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/166048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=166048"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/166048\/revisions"}],"predecessor-version":[{"id":168124,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/166048\/revisions\/168124"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=166048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=166048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=166048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}