However, while Telegram does offer E2EE through a feature called “secret chats", it also offers regular “cloud chats" which aren’t encrypted. The researchers noted that their study revolved around the unencrypted cloud chats, and the cryptographic standards Telegram users for it. According to the researchers, Telegram’s cloud chats have a flaw where an “adversary on the network" can “reorder" messages. Cloud chats on the platform are also used to control several automated bots, and such reordering can allow attackers to manipulate how these bots work. The researchers had communicated the vulnerabilities to the platform before publishing the paper, allowing Telegram to fix the issues.

Source: Mint July 18, 2021 07:40 UTC