Cambodia Warns of Telegram Malware Scams, Rising Risk of Theft

The Ministry of Posts and Telecommunications (MPTC) of Cambodia has reissued a stern warning to the public, urging heightened vigilance against suspicious links and file types shared via Telegram. These include files with extensions such as .exe, .zip, .bat, .vbs, .ps1, .sh, .msi, and .scr. The ministry cautions that even if these messages originate from known contacts, the accounts may have been compromised by malicious actors, posing a significant risk of malware infection and data theft. MPTC has observed a recent surge in the distribution of links and documents disguised as business plans, confidential information, urgent correspondence, or financial statements. Examples cited include "Business Plan.exe," "Important documents," "view privately.exe," "Salary Table.exe," "6.zip," and "Latest national news.exe." Clicking on or running these files can lead to malware being installed on mobile phones or computers. This can result in the hijacking of bank accounts, Facebook, Telegram, and other social media profiles, the theft of personal and financial information, and the subsequent use of compromised accounts for fraudulent activities against others. To mitigate these risks, the MPTC strongly advises the public to implement the following protective measures: Enable Two-Step Verification for Telegram accounts and regularly review active sessions. Carefully examine file names and extensions before opening any file. Verify that messages are genuinely from the purported sender before clicking on links or opening attachments. If there is any suspicion, delete the message and attachment, and contact the sender through an alternative method, such as a phone call, to inform them that their Telegram account may have been compromised. Furthermore, using and regularly updating antivirus software is essential. In the event that a user has clicked on a suspicious link or opened a questionable file, they are urged not to enter any sensitive information. They should immediately disconnect their device from the internet, check active sessions, and terminate any unrecognized sessions. Enabling Two-Step Verification for their Telegram account (if not already done) and deleting the suspicious link or file from their device are also critical steps. Mr. Pou Kea, President of the Cambodian Club of Journalists, stated that he receives an average of two to three suspicious links daily. He emphasized his cautious approach, always verifying the sender's history, file type, and questioning the purpose of the communication before acting. He described the MPTC's warning about cybercriminals as a crucial message to prevent Cambodian citizens from falling victim to such technological threats, aligning with the important role of journalists in combating misinformation and fake news. Source: Kampuchea Thmey Local