TELEGRAM ZERO-DAY ENABLED MALWARE DELIVERY

Summary from the TLDR InfoSec newsletter

ESET discovered a vulnerability in Telegram for Android dubbed EvilVideo which allows attackers to disguise malicious APK files as videos. The exploit uses Telegram's automatic file downloading so when users play the "video," they're prompted to install a malicious app.