New IP leak discovered in Telegram: the built-in proxy exposes your real IP using a single-click flaw!

When you click on a "tg://proxy" link, Telegram starts a connection while ignoring your proxy settings. This exposes your real public IP address, leaking your identity online.

The malicious link appears as a nickname, but will steal your real IP address as soon as the user profile is shown. Android and iOS are both affected. Currently the only solution is using a VPN. Telegram has declared that it will only add a warning popup.

Details: dig.watch/updates/telegram-ip-…

Discovered by: Saurabh
Reported by: 0x6rss and GangExposed RU.

#telegram #security #vulnerability #android #ios #software #opensource #foss #cloud #im #chat #proxy #vpn