submitted 3 months ago* (last edited 3 months ago) by to c/youshouldknow@lemmy.world
 

cross-posted from: https://piefed.world/c/tech/p/1146502/telegram-apk-from-apkpure-is-a-spyware

On analyzing the APK with jadx, it contains a class DataCollector, which does not exist in the .apk file downloaded from the official Telegram website.

This class collects a lot of your data, including:

  • Your photos, videos, and files
  • Your contacts
  • Your messages
  • Your GPS Coordinates
  • Your SIM card information
  • Your Telegram profile

This data is monitored and uploaded continuously. All the data is uploaded to a server with IP Address 38.190.225.166

💬 Initial discovery by Eric Parker

🔗 APK Analysis: Part 1 | Part 2.

Source on Telegram.

YSK: Telegram APK from APKPure is a spyware
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 3 months ago

Just stick to fdroid

  • source
  • parent