[liberationtech] Two popular android apps are spying on 30 million Iranian Telegram users in Iran

[Nariman Gharib]

Hi Libtech,

Some of my friends a few weeks ago published two reports regarding how two
Telegram apps:

HotGram “ هاتگرام “
Gold Telegram “ تلگرام طلایی “ “ طلگرام طلایی “

Are spying on Iranian citizens.

3 days ago Iranian officials officially announced that they are behind
those apps:
https://en-radiofarda-com.cdn.ampproject.org/c/s/en.radiofarda.com/amp/29365779.html

I haven’t had a chance to report it to Google as things move slowly through
Google App Store. So I’m adding those reports here, which are in Farsi, but
you can see all the technical analysis around it very easily.

http://vrgl.ir/3mFFT
http://vrgl.ir/pLlXf

The developer behind these apps is uploading the app under many names and
developer consoles. I hope someone there can take a look and also report it
to the relevant person at the Google App Store Security/Policy team.


https://play.google.com/store/apps/details?id=org.x.ariagram
<https://play.google.com/store/apps/details?id=org.x.ariagram&referrer=utm_source=appbrain&utm_medium=appbrain_web&utm_campaign=appbrain_web>
https://play.google.com/store/apps/details?id=com.farsitel.vtwoflt
https://play.google.com/store/apps/details?id=ir.puls.messenger
https://play.google.com/store/apps/details?id=ir.gold.gram
https://play.google.com/store/apps/details?id=com.tlgtala.filttwo
https://play.google.com/store/apps/details?id=com.farsitel.voneflt
https://play.google.com/store/apps/details?id=net.hamgram
https://play.google.com/store/apps/details?id=com.farsitel.vtwoflt
https://play.google.com/store/apps/details?id=com.farsitel.voneflt
https://play.google.com/store/apps/details?id=ir.hotgram.mobile.android&hl=en_GB
https://play.google.com/store/apps/details?id=com.telegtala.tala&hl=en_US


Thank You


-- 
PGP: 0xa53963936999cbb6
@NarimanGharib <https://twitter.com/narimangharib>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20180718/d8705d87/attachment-0001.html>