In September 2020, it had been claimed that Iran's RampantKitten espionage group ran a phishing and surveillance campaign towards dissidents on Telegram.[362] The assault relied on persons downloading a malware-contaminated file from any source, at which level it will replace Telegram information about the device and 'clone' session knowledge. https://www.telegramkko.com/