Beware the FireScam: Android Malware Masquerading as Telegram Premium Strikes Again!
Beware of FireScam, the sneaky Android malware posing as Telegram Premium. This digital spy grabs permissions faster than a toddler grabs candy, monitoring everything from your app usage to your clipboard contents. Cyfirma warns it’s a privacy nightmare wrapped in a phishing package, ready to deliver your data to the highest bidder.

Hot Take:
Who would have guessed that downloading a premium version of a free app could lead to such a fiery disaster? Android users, beware: your scamming fire extinguisher is nowhere to be found, and FireScam is burning through your data faster than a hot knife through butter.
Key Points:
- FireScam disguises itself as ‘Telegram Premium’ and is distributed via a phishing website.
- The malware requests extensive permissions and blocks app updates for persistence.
- It has broad monitoring capabilities, including intercepting messages and tracking user activities.
- FireScam communicates with its C&C server using Firebase Cloud Messaging.
- It exfiltrates data to a Firebase Realtime Database URL, employing advanced evasion techniques.
Already a member? Log in here