{"id":167268,"date":"2026-04-03T11:12:02","date_gmt":"2026-04-03T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika"},"modified":"2026-04-03T11:12:02","modified_gmt":"2026-04-03T09:12:03","slug":"neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","title":{"rendered":"Klienti jozyrtar Telegram Nekogram d\u00ebrgonte numrat e telefonit te boti i zhvilluesit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb klientin e paudh\u00eb t\u00eb Telegramit, Nekogram, \u00ebsht\u00eb zbuluar nj\u00eb kod i obfuskatuar q\u00eb fshehurazi d\u00ebrgon numrat e telefonit t\u00eb p\u00ebrdoruesve q\u00eb hyn\u00eb n\u00eb aplikacion te boti \u2018@nekonotificationbot\u2019, n\u00eb lidhje me identifikuesin e p\u00ebrdoruesit. Ndryshimi p\u00ebr mbledhjen e numrave t\u00eb telefonit \u00ebsht\u00eb i pranish\u00ebm vet\u00ebm n\u00eb paketat APK t\u00eb gatshme, t\u00eb shp\u00ebrndara p\u00ebrmes Google Play, GitHub dhe kanalit Telegram t\u00eb projektit. N\u00eb kodin burimor n\u00eb GitHub dhe n\u00eb paket\u00ebn APK nga katalogu F-Droid, ndryshimi q\u00eb mbledh numrat e telefonit mungon. <\/p>\n

Backdoor-i ishte i pranish\u00ebm n\u00eb skedarin Extra.java. Supozohet se d\u00ebrgimi filloi q\u00eb nga versioni Nekogram 11.2.3, fillimisht vet\u00ebm p\u00ebr p\u00ebrdoruesit me numra kinez\u00eb, dhe m\u00eb pas p\u00ebr t\u00eb gjith\u00eb. N\u00eb program gjithashtu ishin p\u00ebrdorur bot\u00ebt osint \u2018@tgdb_search_bot\u2019 dhe \u2018@usinfobot\u2019 p\u00ebr t\u00eb identifikuar p\u00ebrdoruesit sipas ID-s\u00eb s\u00eb tyre, por numrat e telefonit nuk u d\u00ebrguan atyre. \"Klienti <\/p>\n

K\u00ebrkuesit p\u00ebrgatit\u00ebn nj\u00eb Java hook dhe nj\u00eb bot, q\u00eb lejon \u00e7do p\u00ebrdorues t\u00eb verifikoj\u00eb d\u00ebrgimin e numrave t\u00eb telefonit nga instanca e tij e aplikacionit. \"Klienti <\/p>\n

Sipas mendimit t\u00eb k\u00ebrkuesve q\u00eb zbuluan problemin, autor\u00ebt e programit mund t\u00eb ken\u00eb p\u00ebrdorur informacionin e marr\u00eb p\u00ebr t\u00eb formuar nj\u00eb baz\u00eb t\u00eb dh\u00ebnash p\u00ebr shitje t\u00eb m\u00ebvonshme p\u00ebr krijuesit e bota OSINT. Obfuskimi i ndryshimit dhe p\u00ebrdorimi i k\u00ebrkesave inline p\u00ebr d\u00ebrgimin e t\u00eb dh\u00ebnave, d\u00ebshmojn\u00eb p\u00ebr nj\u00eb fshehje t\u00eb q\u00ebllimshme t\u00eb aktiviteteve t\u00eb tilla. Pas zbardhjes s\u00eb problemit n\u00eb sistemin e ndjekjes s\u00eb gabimeve t\u00eb projektit, autori i Nekogram pranoi d\u00ebrgimin e numrave t\u00eb telefonit te boti i tij, pa shpjeguar arsyet e k\u00ebsaj aktiviteti, por duke p\u00ebrmendur se numrat e d\u00ebrguar nuk u ruajt\u00ebn dhe nuk u kaluan askund. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb evidentohet zbulimi i nj\u00eb vulnerabiliteti n\u00eb aplikacionin zyrtar Telegram. Projekti Zero Day Initiative (ZDI), i cili ofron shp\u00ebrblime monetare p\u00ebr raportimin e vulnerabiliteteve t\u00eb pap\u00ebrmir\u00ebsuara, publikoi t\u00eb dh\u00ebna paraprake p\u00ebr vulnerabilitetin ZDI-CAN-30207 n\u00eb Telegram, i cili ka marr\u00eb nivelin kritik t\u00eb rrezikshm\u00ebris\u00eb (9.8 nga 10) dhe \u00ebsht\u00eb klasifikuar si sulm i larg\u00ebt, i cili nuk k\u00ebrkon veprime nga p\u00ebrdoruesi. Detajet do t\u00eb zbulohen m\u00eb 24 korrik, duke i dh\u00ebn\u00eb koh\u00eb zhvilluesve t\u00eb Telegram t\u00eb arrijn\u00eb p\u00ebrmir\u00ebsimin te p\u00ebrdoruesit. <\/p>\n

Informacioni p\u00ebr nj\u00eb dob\u00ebsi q\u00eb shfaqet kur hapen ngjit\u00ebs t\u00eb animuar t\u00eb dizajnuara ve\u00e7mas n\u00eb Telegram, ka dal\u00eb ve\u00e7mas dhe mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e kodit nga sulmuesit pa ndonj\u00eb veprim nga ana e p\u00ebrdoruesit. Sipas duket, dob\u00ebsia \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim n\u00eb kodin e bibliotek\u00ebs rlottie, e cila siguron funksionimin e parashikimit. <\/p>\n

P\u00ebrfaq\u00ebsuesit e Telegram kan\u00eb deklaruar se nuk e konsiderojn\u00eb k\u00ebt\u00eb problem si nj\u00eb dob\u00ebsi t\u00eb rrezikshme, pasi t\u00eb gjitha ngjit\u00ebsit e ngarkuar kontrollohen paraprakisht p\u00ebr sistemet<\/a> Telegram dhe kontrolli i till\u00eb nuk do t\u00eb lejonte shfaqjen e ngjit\u00ebsve t\u00eb d\u00ebmsh\u00ebm p\u00ebr p\u00ebrdoruesit. Pas deklarat\u00ebs s\u00eb Telegram, niveli i rrezikshm\u00ebris\u00eb s\u00eb dob\u00ebsis\u00eb \u00ebsht\u00eb reduktuar nga 9.8 n\u00eb 7.0.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 «@nekonotificationbot» \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 APK-\u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Google Play, GitHub \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u043d\u0430 GitHub \u0438 \u0432 APK-\u043f\u0430\u043a\u0435\u043d\u0442\u0435 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 F Droid \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":167269,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167268","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Klienti jozyrtar i Telegramit, Nekogram, d\u00ebrgonte numrat e telefonit botit t\u00eb zhvilluesve | ProHoster","description":"N\u00eb klientin jozyrtar t\u00eb Telegramit, Nekogram, \u00ebsht\u00eb zbuluar nj\u00eb kod i obskurizuar q\u00eb fshehurazi i d\u00ebrgon botit \"@nekonotificationbot\" numrat e telefonit t\u00eb p\u00ebrdoruesve q\u00eb hyjn\u00eb n\u00eb aplikacion, lidhur me identifikuesin e p\u00ebrdoruesit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Telegram-\u043a\u043b\u0438\u0435\u043d\u0442 Nekogram \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0431\u043e\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 "@nekonotificationbot" \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-03T09:12:03+00:00","article:modified_time":"2026-04-03T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/167268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=167268"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/167268\/revisions"}],"predecessor-version":[{"id":168103,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/167268\/revisions\/168103"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/167269"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=167268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=167268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=167268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}