TLDR InfoSec · STRATEGIES & TACTICS
HOW TO INTERCEPT DATA EXFILTRATED BY MALWARE VIA TELEGRAM AND DISCORD
Summary from the TLDR InfoSec newsletter
This blog post explains how to gather information on threat actors, using Telegram API to identify them and attribute malware samples. It demonstrates steps to intercept data exfiltrated by malware through Telegram and Discord, including obtaining bot tokens, chat IDs, and forwarding messages for analysis. The post provides scripts and examples for interacting with Telegram bots and Discord webhooks to monitor and analyze malware activities in real time.