Critical THREAT

Telegram Premium Mod APK

Technical Analysis & Behavior

Fake 'Unlocked Telegram Premium' APK used to deliver SpyNote and CraxsRAT remote access trojans, stealing active Telegram tdata sessions and crypto wallet seed phrases.

Package ID / SHA256 Hash

org.telegram.messenger.mod

Threat Family

SpyNote RAT / Session Stealer

Target Platform

Android Sideloaded APK

Date Logged

2026-10-17

Device Compromised? Scan & Protect Your Identity

If you installed or interacted with this APK, your credentials, 2FA codes, and banking apps may be exposed. Activate real-time mobile antivirus protection immediately.

🛡️ Activate Surfshark Antivirus & Alternative ID 🔒 Cloud APK Sandbox — Coming Soon