CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Telegram Proxy Links Expose User IP Addresses on Click

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Telegram clients on Android and iOS automatically connect to proxy servers when users click specially crafted links, exposing their real IP addresses. Attackers can exploit this behavior to deanonymize users by disguising malicious proxy links as harmless usernames or URLs. Telegram will add warnings to proxy links to mitigate the risk. The issue was demonstrated by researchers who showed that clicking a disguised proxy link triggers an automatic connection to the attacker-controlled server, revealing the user's IP address. This can lead to location tracking, denial-of-service attacks, or other targeted abuse. Telegram downplays the issue but acknowledges the risk and plans to implement warnings for proxy links.

Timeline

  1. 12.01.2026 18:20 1 articles · 23h ago

    Telegram to Add Warnings to Proxy Links After IP Exposure Flaw Demonstrated

    Researchers showed that Telegram clients on Android and iOS automatically connect to proxy servers when users click specially crafted links, exposing their real IP addresses. Telegram will add warnings to proxy links to alert users about the potential risk of clicking disguised links.

    Show sources
    Open in new tab

Information Snippets