{"id":167268,"date":"2026-04-03T11:12:02","date_gmt":"2026-04-03T09:12:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika"},"modified":"2026-04-03T11:12:02","modified_gmt":"2026-04-03T09:12:03","slug":"neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","title":{"rendered":"Den oofficiella Telegram-klienten Nekogram skickade telefonnummer till utvecklarens bot.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I den inofficiella Telegram-klienten Nekogram har en f\u00f6rvr\u00e4ngd kod uppt\u00e4ckts som i hemlighet skickar anv\u00e4ndarnas telefonnummer till boten @nekonotificationbot, kopplade till anv\u00e4ndar-ID:n. \u00c4ndringen f\u00f6r att samla in telefonnummer finns endast i de f\u00e4rdiga APK-paketen som distribueras via Google Play, GitHub och projektets Telegram-kanal. I k\u00e4llkoden p\u00e5 GitHub och i APK-paketet fr\u00e5n F-Droid-katalogen saknas den insamlings\u00e4ndringen. <\/p>\n

Bakd\u00f6rren fanns i filen Extra.java. Det antas att s\u00e4ndningen b\u00f6rjade med version Nekogram 11.2.3, initialt endast f\u00f6r anv\u00e4ndare med kinesiska telefonnummer, och d\u00e4refter f\u00f6r alla. Programmet anv\u00e4nde ocks\u00e5 osint-botar @tgdb_search_bot och @usinfobot f\u00f6r att identifiera anv\u00e4ndare baserat p\u00e5 deras ID, men telefonnummer skickades inte till dem. \"Den <\/p>\n

Forskarna har f\u00f6rberett en java-hook och bot som g\u00f6r att varje anv\u00e4ndare kan verifiera att deras version av appen skickar telefonnummer. \"Den <\/p>\n

Enligt de forskare som uppt\u00e4ckte problemet kan programmets skapare ha anv\u00e4nt den insamlade informationen f\u00f6r att skapa en databas f\u00f6r vidare f\u00f6rs\u00e4ljning till skaparna av OSINT-bottar. Att obfuskera \u00e4ndringen och anv\u00e4nda inline-f\u00f6rfr\u00e5gningar f\u00f6r att skicka data visar p\u00e5 avsiktligt dolda aktiviteter. Efter att problemet avsl\u00f6jades i projektets felrapporteringssystem erk\u00e4nde skaparen av Nekogram att telefonnummer skickades till deras bot, utan att f\u00f6rklara orsaken till denna aktivitet, men n\u00e4mnde att de skickade telefonnummer inte sparades eller \u00f6verf\u00f6rdes till n\u00e5gon annan. <\/p>\n

Det kan ocks\u00e5 n\u00e4mnas att en s\u00e5rbarhet har uppt\u00e4ckts i den officiella Telegram-appen. Projektet Zero Day Initiative (ZDI), som erbjuder monet\u00e4ra bel\u00f6ningar f\u00f6r rapporter om ouppdaterade s\u00e5rbarheter, har publicerat prelimin\u00e4ra uppgifter om s\u00e5rbarheten ZDI-CAN-30207 i Telegram, som har tilldelats en kritisk s\u00e4kerhetsniv\u00e5 (9,8 av 10) och har klassificerats som en fj\u00e4rrattack som inte kr\u00e4ver anv\u00e4ndar\u00e5tg\u00e4rder. Detaljer avses att offentligg\u00f6ras den 24 juli, vilket ger Telegrams utvecklare tid att f\u00f6ra ut en l\u00f6sning till anv\u00e4ndarna. <\/p>\n

Det har kommit information om att s\u00e5rbarheten uppst\u00e5r n\u00e4r man \u00f6ppnar s\u00e4rskilt utformade animerade klisterm\u00e4rken i Telegram och kan leda till att skadlig kod k\u00f6rs utan anv\u00e4ndarens \u00e5tg\u00e4rder. Tydligen orsakas s\u00e5rbarheten av ett fel i koden i biblioteket rlottie, som hanterar f\u00f6rhandsvisning. <\/p>\n

Representanter f\u00f6r Telegram har uttalat att de inte anser att den identifierade problemet \u00e4r en farlig s\u00e5rbarhet, eftersom alla uppladdade klisterm\u00e4rken f\u00f6rst genomg\u00e5r en kontroll f\u00f6r servrar<\/a> Telegram och en s\u00e5dan kontroll skulle inte ha till\u00e5tit visning av skadliga klisterm\u00e4rken f\u00f6r anv\u00e4ndarna. Efter Telegrams uttalande har s\u00e5rbarhetens fara s\u00e4nkts fr\u00e5n 9.8 till 7.0.
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 «@nekonotificationbot» \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0433\u043e\u0442\u043e\u0432\u044b\u0445 APK-\u043f\u0430\u043a\u0435\u0442\u0430\u0445, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 Google Play, GitHub \u0438 Telegram-\u043a\u0430\u043d\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u0412 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u043d\u0430 GitHub \u0438 \u0432 APK-\u043f\u0430\u043a\u0435\u043d\u0442\u0435 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 F Droid \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":167269,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-167268","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Den inofficiella Telegram-klienten Nekogram skickade telefonnummer till utvecklarens bot | ProHoster","description":"I den inofficiella Telegram-klienten Nekogram har kod som \u00e4r obfuskerad uppt\u00e4ckts, vilket d\u00f6ljer och skickar anv\u00e4ndarnas telefonnummer till botten \"@nekonotificationbot\", kopplade till anv\u00e4ndarens ID.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 Telegram-\u043a\u043b\u0438\u0435\u043d\u0442 Nekogram \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u0431\u043e\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 | ProHoster","og:description":"\u0412 \u043d\u0435\u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c Telegram-\u043a\u043b\u0438\u0435\u043d\u0442\u0435 Nekogram \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u043e\u0431\u0444\u0443\u0441\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0431\u043e\u0442\u0443 "@nekonotificationbot" \u043d\u043e\u043c\u0435\u0440\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0445 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0438\u043d\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/neoficzialnyj-telegram-klient-nekogram-otpravlyal-nomera-telefonov-botu-razrabotchika","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-04-03T09:12:03+00:00","article:modified_time":"2026-04-03T09:12:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/167268","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=167268"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/167268\/revisions"}],"predecessor-version":[{"id":168103,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/167268\/revisions\/168103"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/167269"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=167268"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=167268"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=167268"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}