---
title: "Stealing your Telegram account in 10 seconds flat"
url: https://daily.dev/posts/stealing-your-telegram-account-in-10-seconds-flat-o2kactswv
source_url: https://lyra.horse/blog/2024/05/stealing-your-telegram-account-in-10-seconds-flat/
type: article
source: "Lobsters"
published: 2024-05-02T02:32:24.547Z
updated: 2024-05-09T08:43:33.910Z
tags: ["security", "telegram"]
reading_time: 16
upvotes: 4
comments: 1
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Stealing your Telegram account in 10 seconds flat

**[Lobsters](https://daily.dev/sources/lobsters)** · 16 min read · 4 upvotes · 1 comments

## Summary

The post discusses a potential exploit in Telegram's web client that allows an attacker to gain access to a user's account using a URL with the account's token. The post also highlights the shared session between different web clients and the difficulty in exploiting the vulnerability remotely. The author suggests a mitigation similar to QR code logins.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://lyra.horse/blog/2024/05/stealing-your-telegram-account-in-10-seconds-flat/>

## Community discussion

Top comments from developers on daily.dev.

**@tvdheijden** · 1 upvotes

> Interesting article, but what I find the coolest are the "screenshots". They're not screenshots at all!!!
>
> ![image](https://res.cloudinary.com/daily-now/image/upload/s--gIOOUVA0--/f_auto/v1714727101/ugc/content_b93b5552-4290-430f-b0ab-fad7e1dd61dc)

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#telegram](https://daily.dev/tags/telegram)

[View this post on daily.dev](https://daily.dev/posts/stealing-your-telegram-account-in-10-seconds-flat-o2kactswv)