In September 2020, it had been claimed that Iran's RampantKitten espionage group ran a phishing and surveillance campaign versus dissidents on Telegram.[362] The assault relied on folks downloading a malware-infected file from any source, at which stage it would swap Telegram documents on the device and 'clone' session knowledge. https://www.telegramkko.com/