indicatorurl
hxxps://api[.]telegram[.]org/bot8164995813:AAH85N7GqLCmFV8QF5STNJv92Cv2ZQKpPGk/sendMessage
- First seen
- 2026-05-13
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Weaponizing Telegram Bots: How Threat Actors Exfiltrate Credentials
Telegram Bot API URL used in a credential phishing campaign to exfiltrate stolen credentials.