Stolen Data Index

Telegram

Theft of data stored in Telegram's tdata directory allows an attacker to reuse the session and gain unauthorized access to the victim’s Telegram account.

App Directory

%APPDATA%\Telegram Desktop

Target Files

If all files under tdata are stolen, they can be used directly on the attacker’s machine without any modification.

References

Updated: Thu Jan 29