Telegram-powered bots circumvent 2FA

Telegram-powered bots circumvent 2FA by exploiting SMS-based and phone-call-based authentication OTP methods. Threat actors provide access to services in Telegram, socially engineering victims to hand over verification codes or passwords. Intel 147 observes this activity and warns against the use of SMS-based and phone-call-based authentication OTP methods, suggesting the adoption of better authentication methods like TOTP codes and push notifications. It emphasizes the importance of reporting and raising awareness about such fraud attempts