Don’t open .exe, .zip or .7z files sent on Telegram

Scammers send files on Telegram that look harmless: a “document”, a “photo pack”, a “salary list” or a “work contract”. Many arrive as .zip, .rar or .7z archives, or as programs ending in .exe, .scr, .bat or .msi.

Opening them can install malware that steals saved passwords, browser logins and your Telegram session. The attacker can then read your chats and message your contacts as if they were you.

A real photo, PDF or document never needs you to “run” or “install” anything. If a chat asks you to extract an archive or double-click a program, stop.

Do not open it and do not forward it. Block the sender and use Report in Telegram.