A friend sent you a file? Their account may be hacked

When an account is taken over, the attacker often messages its contacts with a file or link and a short hook such as “Is this you in this video?” or “Please check my CV”.

A message from a name you know is not proof that the person sent it. Call them, or ask in person, before opening the file.

If your friend’s account was taken over, tell them to end all other sessions in Telegram (Settings → Devices) and turn on Two-Step Verification.