Skip to content
.ca
Home
Posts
Engagements
Recaps
IOCs
Detections
About
Search posts and IOCs
sign in
Loading…
https://api.telegram.org/bot8164995813:aah85n7gqlcmfv8qf5stnjv92cv2zqkppgk/sendmessage · URL · cyfar.ca
indicator
url
hxxps://api[.]telegram[.]org/bot8164995813:AAH85N7GqLCmFV8QF5STNJv92Cv2ZQKpPGk/sendMessage
copy defanged
copy refanged (live)
First seen
2026-05-13
Last seen
2026-05-14
Sightings
1
Posts referencing this indicator
Weaponizing Telegram Bots: How Threat Actors Exfiltrate Credentials
Cofense
Telegram Bot API URL used in a credential phishing campaign to exfiltrate stolen credentials.
2026-05-13
