In September 2020, it was described that Iran's RampantKitten espionage team ran a phishing and surveillance campaign against dissidents on Telegram.[362] The assault relied on people today downloading a malware-contaminated file from any source, at which level it will replace Telegram files about the product and 'clone' session data. https://www.telegramkko.com/