In September 2020, it was described that Iran's RampantKitten espionage group ran a phishing and surveillance marketing campaign versus dissidents on Telegram.[362] The attack relied on individuals downloading a malware-infected file from any supply, at which place it would change Telegram data files over the system and 'clone' session https://dicef416wyb6.blog2freedom.com/profile