Part 2:
The method
The method
Methods
There are two threads that handle this:
There's also a function
The methods
🔗 Part 1
🧑💻 @agamtechtricks
The method
collectSimInfo() collects SIM Card Information, if you provide READ_PHONE_STATE perm.The method
sendLocation() and initLocationTracking() uploads' your GPS coordinates with a 12 hour cooldown.Methods
sendProfile() and sendFullProfile uploads details like your user id, name, phone number, etc. sendAvatar() uploads your profile pictures. Methods sendDialogInfo() and sendMessage() pull metadata of the chats and all the text content of messages, and sendChatInfo() and sendGroupSpeaker() uploads group and members metadata.There are two threads that handle this:
UPLOAD_POOL (6 threads) for uploading files, and META_POOL (4 threads) for JSON data. The data extracted using the methods above is stored in an SQLite database tgc_upload_queue.db which has three tables json_queue, gallery_queue, and file_queue. The database is encrypted with AES-256-GCM.There's also a function
fetchClientConfig() that contacts /api/config. Does it configure something remotely? idk. All requests are HMAC-signed using a native .so file.The methods
postJson(), uploadMultipartAsync(), uploadMultipartDirect(), and uploadDocDirect() upload all the files and JSON data to the server with IP Address 38.190.225.166🔗 Part 1
🧑💻 @agamtechtricks
😱14❤1
Telegram APK from APKPure is a spyware
On analyzing the APK with
This class collects a lot of your data, including:
- Your photos, videos, and files
- Your contacts
- Your messages
- Your GPS Coordinates
- Your SIM card information
- Your Telegram profile
This data is monitored and uploaded continuously. All the data is uploaded to a server with IP Address
💬 Initial discovery by Eric Parker
🔗 APK Analysis: Part 1 | Part 2
🧑💻 @agamtechtricks
On analyzing the APK with
jadx, it contains a class DataCollector, which does not exist in the .apk file downloaded from the official Telegram website.This class collects a lot of your data, including:
- Your photos, videos, and files
- Your contacts
- Your messages
- Your GPS Coordinates
- Your SIM card information
- Your Telegram profile
This data is monitored and uploaded continuously. All the data is uploaded to a server with IP Address
38.190.225.166💬 Initial discovery by Eric Parker
🔗 APK Analysis: Part 1 | Part 2
🧑💻 @agamtechtricks
👀52🤡15❤4👏4🤣2👍1😱1👾1
ATT • Tech News
Telegram APK from APKPure is a spyware On analyzing the APK with jadx, it contains a class DataCollector, which does not exist in the .apk file downloaded from the official Telegram website. This class collects a lot of your data, including: - Your photos…
The spyware is only in version 12.6.5 uploaded on APKPure
When I downloaded the APK in the morning, the version it showed me by default was
All the other versions available versions have the same signature as the official
The latest version which is safe i.e.
And yes, the 12.6.5 is still available on APKPure, with the spyware.
Idk what to say, just make sure you scan every file you get from some third party app store and make sure it matches the signature of the app downloaded from the official website.
We'll let you know if something interesting is found out in
🧑💻 @agamtechtricks
When I downloaded the APK in the morning, the version it showed me by default was
12.6.5 (the one with the DataCollector class) even though 12.7.3 was available.All the other versions available versions have the same signature as the official
.apk file, and version 12.6.5 has a different certificate. Funny enough, APKPure's "Security Check" says there's "No Virus" and "No Malware".The latest version which is safe i.e.
12.7.3 is uploaded by "Yeasmean Khan" whereas version 12.6.5 was uploaded by "Telegram FZ-LLC".And yes, the 12.6.5 is still available on APKPure, with the spyware.
Idk what to say, just make sure you scan every file you get from some third party app store and make sure it matches the signature of the app downloaded from the official website.
We'll let you know if something interesting is found out in
12.6.5.🧑💻 @agamtechtricks
🤔22❤4👏3🤬1
Microsoft is phasing out SMS codes for signing into personal Microsoft/Xbox accounts
Since SMS-based authentication is a leading source of fraud, Microsoft believes that passwordless accounts (Microsoft Authenticator), passkeys and verified email are more secure.
All personal account holders will now be prompted with "Sign in faster with your face, fingerprint, or PIN."
🔗 Microsoft
🧑💻 @agamtechtricks
Since SMS-based authentication is a leading source of fraud, Microsoft believes that passwordless accounts (Microsoft Authenticator), passkeys and verified email are more secure.
All personal account holders will now be prompted with "Sign in faster with your face, fingerprint, or PIN."
🔗 Microsoft
🧑💻 @agamtechtricks
🤣27😁3🔥2
This media is not supported in your browser
VIEW IN TELEGRAM
Motorola's "Smart Feed" has started hijacking the Amazon app to insert affiliate codes
After an app update to Smart Feed (v2.03.0070), opening Amazon opens the user’s browser and immediately redirects to the Amazon app. This only happens if the app is opened from the app drawer and not the homescreen.
The device contacts "
To disable this behaviour, disable the "Smart Feed" app from Settings.
🔗 9to5Google
🧑💻 @agamtechtricks
After an app update to Smart Feed (v2.03.0070), opening Amazon opens the user’s browser and immediately redirects to the Amazon app. This only happens if the app is opened from the app drawer and not the homescreen.
The device contacts "
devicenative.com", a service that places ads on phones. The URL opened in the browser is "kira-abboud.com", a website that references @kirasfashionfinds. The affiliate code being used to open Amazon is "sramz-kff-008-20", which is completely different from the affiliate codes used by @kirasfashionfinds.To disable this behaviour, disable the "Smart Feed" app from Settings.
🔗 9to5Google
🧑💻 @agamtechtricks
🤯14🤣2❤1
Microsoft is replacing Taskbar Search with Copilot
Taskbar search is now being replaced by "Ask Copilot" which opens a floating popup that you can use to interact with Copilot, search for files, open apps, etc. It targets enterprise customers who use the Microsoft 365 ecosystem.
In tests, "Ask Copilot" is more accurate at finding local files and apps compared to the current Windows Search. However, Microsoft is working on improving the normal Search as well.
Ask Copilot is entirely optional, and won't be enabled by default. It is expected to release mid-2026, but it might change.
🔗 Microsoft's Published Document
🧑💻 @agamtechtricks
Taskbar search is now being replaced by "Ask Copilot" which opens a floating popup that you can use to interact with Copilot, search for files, open apps, etc. It targets enterprise customers who use the Microsoft 365 ecosystem.
In tests, "Ask Copilot" is more accurate at finding local files and apps compared to the current Windows Search. However, Microsoft is working on improving the normal Search as well.
Ask Copilot is entirely optional, and won't be enabled by default. It is expected to release mid-2026, but it might change.
🔗 Microsoft's Published Document
🧑💻 @agamtechtricks
🤡40🤣18❤2😭1
Forwarded from Tech & Leaks Zone
If you are thinking that the AI search box in other browsers like duckduckgo is any useful, consider the monk who polishes a stone to make it a sword, wondering if the effort is not better spent on the wood of the hut. The master asks, is the box the search, or is the search the box?
~ Zen style Telegram AI
~ Zen style Telegram AI
🤣19👏2❤1
Forwarded from ATT • Memes (Αgam)
This media is not supported in your browser
VIEW IN TELEGRAM
🧑💻 @agamtechtricks x @attmemes
🤣24😭2
This media is not supported in your browser
VIEW IN TELEGRAM
֎ New: ChatGPT users can now build real apps directly from chat
ChatGPT's app store just added AppDeploy, and it works with free accounts too.
Describe what you want to build, ChatGPT writes the code, AppDeploy handles deployment automatically inside the same chat, and you get a working link back right away.
AppDeploy includes the infrastructure needed for real apps:
🔐 User login and permissions
🗄 Storage, database, realtime sync and notifications
🤖 Built in AI capabilities
☁️ Full backend, background jobs and scheduled tasks
🧪 Automatic QA for every change and built in versioning
🌐 Custom domains, secrets management and more
Free to use. No subscription or credit card required.
👉 Install AppDeploy in ChatGPT and launch your first app in a few minutes
#Advertisement
ChatGPT's app store just added AppDeploy, and it works with free accounts too.
Describe what you want to build, ChatGPT writes the code, AppDeploy handles deployment automatically inside the same chat, and you get a working link back right away.
AppDeploy includes the infrastructure needed for real apps:
🔐 User login and permissions
🗄 Storage, database, realtime sync and notifications
🤖 Built in AI capabilities
☁️ Full backend, background jobs and scheduled tasks
🧪 Automatic QA for every change and built in versioning
🌐 Custom domains, secrets management and more
Free to use. No subscription or credit card required.
👉 Install AppDeploy in ChatGPT and launch your first app in a few minutes
#Advertisement
🤯27👎7🤡6🔥3👍1👏1
YouTube Adds Gemini-Powered Custom Feed to Home Page
YouTube has introduced a "new way to shape your discovery experience." You can now generate a constantly refreshing custom feed using a prompt. You can also edit the prompt to change your custom feed at any time.
This is currently rolling out to signed-in viewers on the mobile app and desktop in the U.S. Your YouTube search and watch history must be turned on for this.
🔗 YouTube Help
🧑💻 @agamtechtricks
YouTube has introduced a "new way to shape your discovery experience." You can now generate a constantly refreshing custom feed using a prompt. You can also edit the prompt to change your custom feed at any time.
This is currently rolling out to signed-in viewers on the mobile app and desktop in the U.S. Your YouTube search and watch history must be turned on for this.
🔗 YouTube Help
🧑💻 @agamtechtricks
👎26❤7🤡4🔥1
Vertu has released AlphaFold with Hermes Agent
AlphaFold is a book-style luxury foldable with Hermes Agent, an AI Agent built in.
It has a 8.05-inch inner canvas, 6.53-inch outer display with 120Hz and 5000 nits peak brightness. It has a 50MP main camera, 50MP ultra-wide, 5MP telephoto, 20MP selfie camera and 6,500mAh silicon-carbon battery with 65W charging and a Titanium hinge rated to 650,000 folds. It also has two-way satellite communication. It runs Android 15.
Hermes Agent routes requests across OpenAI's GPT, Claude, Gemini, and selected open-source models. It can perform 64 Native actions and operate 70+ apps like WhatsApp, Telegram, Google Chat, Gmail, Google Drive etc. with voice. It also learns your habits. Hermes Agent also supports enterprise systems like ERP and CRM. Memories can be cleared at any time, sensitive information is processed with on-device AI (A5 Chip).
Price: $6,880 (Calfskin), $8,800 (Alligator), $46,800 (Gold/Diamond), and more.
🔗 AlphaFold | Hermes Agent
🧑💻 @agamtechtricks
AlphaFold is a book-style luxury foldable with Hermes Agent, an AI Agent built in.
It has a 8.05-inch inner canvas, 6.53-inch outer display with 120Hz and 5000 nits peak brightness. It has a 50MP main camera, 50MP ultra-wide, 5MP telephoto, 20MP selfie camera and 6,500mAh silicon-carbon battery with 65W charging and a Titanium hinge rated to 650,000 folds. It also has two-way satellite communication. It runs Android 15.
Hermes Agent routes requests across OpenAI's GPT, Claude, Gemini, and selected open-source models. It can perform 64 Native actions and operate 70+ apps like WhatsApp, Telegram, Google Chat, Gmail, Google Drive etc. with voice. It also learns your habits. Hermes Agent also supports enterprise systems like ERP and CRM. Memories can be cleared at any time, sensitive information is processed with on-device AI (A5 Chip).
Price: $6,880 (Calfskin), $8,800 (Alligator), $46,800 (Gold/Diamond), and more.
🔗 AlphaFold | Hermes Agent
🧑💻 @agamtechtricks
🤪12🔥10❤2