TWEAKOS Malware Transforms Telegram into Stealer and Stolen Account Marketplace
A new malware, TWEAKOS, has emerged, turning the Telegram messaging platform into a tool for stealing accounts and operating a marketplace for these stolen credentials. The operation combines a Windows stealer with a Telegram bot to manage victims and facilitate the sale of stolen access. The threat was identified after its source code appeared on Pastebin, revealing two Python components. Researchers have not yet determined how the stealer initially infects victims or the total number of affected individuals. Running the malware can compromise Discord accounts and create reusable Telegram login sessions. Unlike other malware targeting messaging platforms, TWEAKOS integrates a storefront directly into its stealing operation, allowing for the sale of stolen Telegram and Discord accounts. The malware focuses on obtaining valid Discord authentication tokens and creating new Telegram sessions, which are then sent to operators. The system also includes a bot that manages victim records, buyers, products, and co...
