A security researcher has discovered that Telegram’s mobile apps on Android and iOS may inadvertently expose users’ IP addresses through quick proxy setup links. Unlike unsafe file or link warnings, Telegram automatically connects to proxy servers to check availability—bypassing any security pop-up.

This behavior allows attackers to disguise proxy setup links as usernames or harmless hyperlinks. Once clicked, the app sends a request to a server under the attacker’s control, revealing the user’s IP address.

Tests by the @tginfo team confirmed that Desktop, macOS, Telegram X, and Web versions are unaffected. While the risk to regular users is low, those needing stronger privacy should use a system-wide VPN. Telegram is expected to address the issue in future updates.

source: tginfo

Keep an eye on the daily Telegram news from OnlyTG.