Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] Two popular android apps are spying on 30 million Iranian Telegram users in Iran

Nariman Gharib nariman.gh at gmail.com
Wed Jul 18 07:49:15 PDT 2018


Hi Libtech,

Some of my friends a few weeks ago published two reports regarding how two
Telegram apps:

HotGram “ هاتگرام “
Gold Telegram “ تلگرام طلایی “ “ طلگرام طلایی “

Are spying on Iranian citizens.

3 days ago Iranian officials officially announced that they are behind
those apps:
https://en-radiofarda-com.cdn.ampproject.org/c/s/en.radiofarda.com/amp/29365779.html

I haven’t had a chance to report it to Google as things move slowly through
Google App Store. So I’m adding those reports here, which are in Farsi, but
you can see all the technical analysis around it very easily.

http://vrgl.ir/3mFFT
http://vrgl.ir/pLlXf

The developer behind these apps is uploading the app under many names and
developer consoles. I hope someone there can take a look and also report it
to the relevant person at the Google App Store Security/Policy team.


https://play.google.com/store/apps/details?id=org.x.ariagram
<https://play.google.com/store/apps/details?id=org.x.ariagram&referrer=utm_source=appbrain&utm_medium=appbrain_web&utm_campaign=appbrain_web>
https://play.google.com/store/apps/details?id=com.farsitel.vtwoflt
https://play.google.com/store/apps/details?id=ir.puls.messenger
https://play.google.com/store/apps/details?id=ir.gold.gram
https://play.google.com/store/apps/details?id=com.tlgtala.filttwo
https://play.google.com/store/apps/details?id=com.farsitel.voneflt
https://play.google.com/store/apps/details?id=net.hamgram
https://play.google.com/store/apps/details?id=com.farsitel.vtwoflt
https://play.google.com/store/apps/details?id=com.farsitel.voneflt
https://play.google.com/store/apps/details?id=ir.hotgram.mobile.android&hl=en_GB
https://play.google.com/store/apps/details?id=com.telegtala.tala&hl=en_US


Thank You


-- 
PGP: 0xa53963936999cbb6
@NarimanGharib <https://twitter.com/narimangharib>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20180718/d8705d87/attachment-0001.html>


More information about the liberationtech mailing list