Threat actors with suspected ties to Iran have been found to leverage messaging apps like Telegram and Psiphon to install a Windows remote access trojan (RAT) Russian cybersecurity firm Kaspersky attributed the campaign to an advanced persistent threat (APT) group it tracks as Ferocious Kitten. The group has targeted Persian-speaking individuals allegedly based in the country while successfully operating under the radar. The decoy content displayed by the malicious files often made use of political themes and involved images or videos of resistance bases or strikes against the Iranian regime.
Source: https://thehackernews.com/2021/06/a-new-spyware-is-targeting-telegram-and.html