Id bot anonymous telegram

Id bot anonymous telegram. The researchers probed a sample of remote management malware dubbed GoodSender and identified the mechanism within the code that awaited commands from a Telegram bot. The malware included two pieces of Telegram identification and authentication information—called the bot API token and Chat ID—that are used to direct bots' queries to the right chats. Armed with these details, the researchers realized that they could craft API requests that would essentially replay all the communications between the malware author and his bot.

Because the hacker made the mistake of doing all of his testing and deployment in one bot setup instead of covering his tracks by using multiple accounts , the researchers were able to study how he had set up, tested, and eventually started deploying the malware. While the Forcepoint researchers used the Telegram API to snoop on the hacker's bot communications as part of well-meaning defense analysis, they emphasize that someone else could use the same technique for ill and look back at a whole conversation a bot is present in. And even someone who doesn't have a chat's bot API token and Chat ID from a malware sample could still potentially extract them in other ways.