Reply to thread

Message

<blockquote data-quote="Nikos751" data-source="post: 1034019" data-attributes="member: 5403">Hello to all!I am new to the world of Telegram and I discovered bots etc. Along with that discovery, I started looking the cyber security side of it.I understand that social engineering is a real thing at every comunication platform, and users can be fooled to provide personal/sensitive data to another party or open links in web browser, or download any kind of file, so such situtations is out of scope.But what about the bots? I honestly do not know what type of code is executed, if there is containment, and what permissions it has on my system while clicking those buttons.&nbsp; Also phone number is by default shared, if not changed in settings (I think), so maybe telegram API&#039;s give the present of a default &quot;leak&quot; for every bot.So to sum up, can a user get infected just by launching a bot giving commands without sending personal data, or just clicking the available buttons?</blockquote>

[QUOTE="Nikos751, post: 1034019, member: 5403"] Hello to all! I am new to the world of Telegram and I discovered bots etc. Along with that discovery, I started looking the cyber security side of it. I understand that social engineering is a real thing at every comunication platform, and users can be fooled to provide personal/sensitive data to another party or open links in web browser, or download any kind of file, so such situtations is out of scope. But what about the bots? I honestly do not know what type of code is executed, if there is containment, and what permissions it has on my system while clicking those buttons. Also phone number is by default shared, if not changed in settings (I think), so maybe telegram API's give the present of a default "leak" for every bot. So to sum up, can a user get infected just by launching a bot giving commands [U]without sending personal data[/U], or just clicking the available buttons? [/QUOTE]

Verification