SlowMist Cosine: Hacker group uses stolen Telegram accounts to spread worms and deliver poison.

SlowMist's Cosmos posted on the X platform that some hacker groups use worm propagation engineering to gain access to Telegram accounts. They then contact contacts in both Chinese and English, using fake Zoom meeting software, infected code repositories, infected third-party tools, or games to deliver malware to their targets. After stealing cryptocurrency and accounts, these groups move on to the next phase, continuously refining their worm propagation techniques.