Telegram Has Unencrypted Copies of Secret Chat Messages
Telegram users should be aware the messaging app's "Secret Chats" may not be so secret after all.
Zuk Avraham, founder and CTO of mobile security company Zimperium, created private messages using Telegram's Secret Chat feature and tried to see if he could find unencrypted copies of the message elsewhere. He uncovered a number of issues with how Telegram handled these messages. Telegram is a free cloud-based mobile and desktop messaging app for iOS, Android, Windows Phone, Windows, Linux, and Mac OS X which lets you send encrypted messages, photos, videos, and file of any type (including .zip, .doc, .mp3, and others) to other Telegram users.
This week's Mobile Threat Monday looks at the issues Avraham found on the Android version of the app. "Telegram claims to be a privacy oriented messaging app capable of encrypting personal and business secrets and removing them from memory—only they don't," Avraham wrote on Zimperium's blog on Monday. He called the way encryption was used by Telegram "almost horrifying."
