{"id":167268,"date":"2026-04-03T11:12:02","date_gmt":"2026-04-03T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika"},"modified":"2026-04-03T11:12:02","modified_gmt":"2026-04-03T09:12:03","slug":"neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","title":{"rendered":"Clientul neoficial Telegram Nekogram trimitea numerele de telefon c\u0103tre botul dezvoltatorului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen clientul neoficial de Telegram, Nekogram, a fost descoperit un cod obfuscat care trimite \u00een secret numerele de telefon ale utilizatorilor, care au accesat aplica\u021bia, c\u0103tre botul @nekonotificationbot, legat de identificatorul utilizatorului. Modificarea pentru colectarea numerelor de telefon se afl\u0103 doar \u00een pachetele APK finalizate, distribuite prin Google Play, GitHub \u0219i canalul Telegram al proiectului. \u00cen codul surs\u0103 de pe GitHub \u0219i \u00een pachetul APK din catalogul F-Droid, modificarea care colecteaz\u0103 numerele de telefon lipse\u0219te. <\/p>\n

Backdoor-ul a fost prezent \u00een fi\u0219ierul Extra.java. Se prespune c\u0103 trimiterea a \u00eenceput cu versiunea Nekogram 11.2.3, la \u00eenceput doar pentru utilizatorii cu numere chineze\u0219ti, iar apoi pentru to\u021bi. Programul a mai folosit bo\u021bi osint @tgdb_search_bot \u0219i @usinfobot pentru a identifica utilizatorii dup\u0103 ID-ul lor, dar numerele de telefon nu au fost trimise acestora. \"Clientul <\/p>\n

Cercet\u0103torii au preg\u0103tit un hook Java \u0219i un bot care permit oric\u0103rui utilizator s\u0103 verifice trimiterea numerelor de telefon de c\u0103tre instan\u021ba sa a aplica\u021biei. \"Clientul <\/p>\n

Potrivit cercet\u0103torilor care au identificat problema, autorii programului ar fi putut folosi informa\u021biile ob\u021binute pentru a crea o baz\u0103 de date pentru v\u00e2nzarea ulterioar\u0103 c\u0103tre creatorii boturilor OSINT. \u00cenf\u0103\u021bi\u0219area activit\u0103\u021bii ascunse este semnalat\u0103 de obfuscare \u0219i utilizarea cererilor inline pentru trimiterea datelor. Dup\u0103 dezv\u0103luirea problemei \u00een sistemul de urm\u0103rire a erorilor al proiectului, autorul Nekogram a recunoscut trimiterea numerelor de telefon c\u0103tre botul s\u0103u, f\u0103r\u0103 a explica motivele unei astfel de activit\u0103\u021bi, men\u021bion\u00e2nd totu\u0219i c\u0103 numerele trimise nu au fost stocate \u0219i nu au fost transmise altora. <\/p>\n

De asemenea, se poate men\u021biona descoperirea unei vulnerabilit\u0103\u021bi \u00een aplica\u021bia oficial\u0103 Telegram. Proiectul Zero Day Initiative (ZDI), care ofer\u0103 recompense financiare pentru raportarea vulnerabilit\u0103\u021bilor necorectate, a publicat date preliminare despre vulnerabilitatea ZDI-CAN-30207 \u00een Telegram, care a primit un nivel critic de gravitate (9.8 din 10) \u0219i a fost marcat ca atac de la distan\u021b\u0103, f\u0103r\u0103 a necesita ac\u021biuni din partea utilizatorului. Detaliile urmeaz\u0103 s\u0103 fie dezv\u0103luite pe 24 iulie, oferind timp dezvoltatorilor Telegram pentru a livra corecturile utilizatorilor. <\/p>\n

A ap\u0103rut informa\u021bia c\u0103 vulnerabilitatea se manifest\u0103 atunci c\u00e2nd sunt deschise \u00een Telegram stickere animate special concepute \u0219i poate duce la executarea codului de c\u0103tre un atacator f\u0103r\u0103 nicio ac\u021biune din partea utilizatorului. Se pare c\u0103 vulnerabilitatea este cauzat\u0103 de o eroare \u00een codul bibliotecii rlottie, care asigur\u0103 func\u021bionarea previzualiz\u0103rii. <\/p>\n

Reprezentan\u021bii Telegram au declarat c\u0103 nu consider\u0103 problema identificat\u0103 o vulnerabilitate periculoas\u0103, deoarece toate sticker-urile \u00eenc\u0103rcate sunt verificate \u00een prealabil pentru servere<\/a> Telegram \u0219i o astfel de verificare nu ar fi permis afi\u0219area unui sticker mali\u021bios utilizatorilor. Dup\u0103 declara\u021bia Telegram, nivelul de pericol al vulnerabilit\u0103\u021bii a fost redus de la 9.8 la 7.0.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 «@nekonotificationbot» \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 APK-\u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Google Play, GitHub \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u043d\u0430 GitHub \u0438 \u0432 APK-\u043f\u0430\u043a\u0435\u043d\u0442\u0435 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 F Droid \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":167269,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167268","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Clientul neoficial Telegram Nekogram trimitea numerele de telefon c\u0103tre botul dezvoltatorului | ProHoster","description":"\u00cen clientul neoficial Telegram Nekogram a fost identificat un cod obfuscat, care trimite \u00een secret numerele de telefon ale utilizatorilor care au accesat aplica\u021bia c\u0103tre botul \"@nekonotificationbot\", legat de identificatorul utilizatorului.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Telegram-\u043a\u043b\u0438\u0435\u043d\u0442 Nekogram \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0431\u043e\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 "@nekonotificationbot" \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-03T09:12:03+00:00","article:modified_time":"2026-04-03T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/167268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=167268"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/167268\/revisions"}],"predecessor-version":[{"id":168103,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/167268\/revisions\/168103"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/167269"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=167268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=167268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=167268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}