Telegram Has Been Hacked

Learn Cybersecurity - Name Your Price Training with John Hammond: nameyourpricetraining.com
📧JOIN MY NEWSLETTER ➡ jh.live/email
🙏SUPPORT THE CHANNEL ➡ jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ jh.live/sponsor
🌎FOLLOW ME EVERYWHERE ➡ jh.live/twitter ↔ jh.live/linkedin ↔ jh.live/discord ↔ jh.live/instagram ↔ jh.live/tiktok
💥 SEND ME MALWARE ➡ jh.live/malware
🔥KZbin ALGORITHM ➡ Like, Comment, & Subscribe!

[@BhilBhil-tc8fy]

Yes please. I would love a video that does a deep dive on the *Metaspyclub* project

[@ranjanekka85]

Metaspyclub gang in the house! Thanks for the analysis!

[@milanjamod7469]

Metaspyclub anticipation is building to a fever pitch! 😥

[@KvapuJanjalia]

I'm not afraid of a calculator! Bring it on!

[@cringemaki]

Everybody gangsta till the calculator app starts to ask permissions for camera, microphone and location 💀

[@yukiplaysFr]

💀

[@TobbeOakleaf]

Oh it will be problems! Count on it!

[@BillAnt]

At 8:14 that evil laughter Muaahhh!! lol

[@Raymi20-]

​@@yukiplaysFr**salutes to the therian** Ma'am how can I help you ma'am

[@Spiderfffun]

RCE after RCE, I hope kids wont have to learn about the year of the vulnerabilities, 2024, in the future

[@SLZeroArrow]

Thy Digital Apocalypse is drawing nearer by the day

[@atomgutan8064]

This is literally cybersecurity history.

[@TehPwnerer]

No it will be certainly eclipsed by the number of them in 2025

[@Ph34rNoB33r]

I wonder whether the whole AI hype will make even more RCEs show up. Either by improving exploit code or by reducing code quality in the attacked app because people trust AI code without questioning it.

[@Shaggidelic69]

​@@SLZeroArrow seriously. I dedicated my whole life to computers and now they looking like they wanna kill us (ai). Ai is phuggin everything up. Its kinda scary tbh

[@DoorThief]

I just got a SNYK sponsored ad by John Hammond before his own video

[@NileGold]

Fr

[@h5e]

I did too

[@alek002]

It's rigged!1!1!1!1!1

[@thecrew8612]

Saaame

[@why1851]

too much rce exploits bro 💀💀💀💀💀💀💀

[@sunbleachedangel]

What are others?

[@amaankhan8436]

Xz utils, rust, palo alto

[@sunbleachedangel]

@@amaankhan8436 Palo alto?? My company uses that lul

[@why1851]

@@sunbleachedangel there was a rust rce CVE-2024-24576, aint that effective though

[@yureimenkishi4291]

Rust already released a patch its java that said they ain't fixing it. Tbf .bat codes running aren't used anywhere so who really cares

[@ghoulbuster1]

TL;DR The exploit disguises as a fake video that when played executes python code, requires python to be installed for it to work.

[@mushroommanny]

saved me about 10 mins bro ty

[@lucplayed]

Me, an it student, got "hacked" like that...🤣

[@AstralArchivists]

Bet the three later agencies are punching air rn. All their exploits getting found.

[@BillAnt]

While reading your comment. lol

[@MrCobalt]

You think every exploit exists because of "three later agencies"? 😂

[@ohmsohmsohms]

@@MrCobaltgiven the past of their involvement with 0days, I wouldn’t be surprised if they were aware of maybe 1 of the RCE vulnerabilities discovered this year

[@v-y]

​@@MrCobalt theres no way this was an unintended oversight

[@januzi2]

Wait ... we can hack those spammers that are sending us the messages to text them?

[@osiristeam6959]

They should have a list of trusted extensions instead of a list of untrusted ones.

[@zeteya]

Very bad idea

[@rafayahmed6259]

​@@zeteyawhy?

[@zeteya]

@@rafayahmed6259 Many reasons, one being a good extension can turn bad one day, but an extension that was bad to begin with will never turn good.

[@ThisIsJustADrillBit]

The fuzzing begins ❤

[@BillAnt]

LPL has entered the chat, fuzzing locks are fun. hehe

[@AuxiliaryPanther]

​@@BillAnt...we're getting an SQL injection on three, oh it's binding. A little malware on four, and we're set. Going back to three, gained root access to run our query, annd now we're in.

[@BillAnt]

​@@AuxiliaryPanther lol that took like 30 seconds.... not a very secure lock. :D

[@cvl14]

This just shows how blacklist are ineffective as a security tool

[@kbabe3915]

The scrum meeting: "Yeah, an approve list is too short, let's write out every single extension that could execute code instead of just choosing some image and video formats that we support."

[@user-hp2dr5qc8p]

A whitelist can get annoying tbh.

[@kbabe3915]

@@user-hp2dr5qc8p Ah yeah, you're right, much more annoying than a 0 day. Also a blacklist had to have been annoying from the very start.

[@milanvucetic1292]

3:55 Not me watching the John Hammond video and getting an ad with John Hammond in it. Some may say it's a 2 for 1.

[@BillAnt]

Taking it up the a** without lube. lol

[@acessor9899]

This one RCE was indeed fun to use, gotta find more ;)

[@1hw3]

hello vro

[@Luzum]

im gonna touch u vro ♥

[@jabrowski_]

Interesting shiz John. Liked and subbed, stay safe

[@te-weikaigai1836]

I'm glad that I migrated to Debian + KDE two months ago. I still have my Windows on my drive, but never want to boot it anymore. The KDE environment in Linux is just much better than Windows.

[@HyBlock]

who asked?

[@KLR-3]

Welcome to the family.🐧

[@te-weikaigai1836]

@@HyBlock the implication was that I'm not affected by windows RCE anymore.

[@freerice9595]

I've tried making Ubuntu and Linux mint my daily driver many times. Can't do it. But for home labbing and running servers it's perfect.

[@shiiy5131]

it's just so much more superior, once you try it you never go back lol

[@vladislavkaras491]

Thanks for the news!

[@cyber_space09]

Wow good job I want more info ❤

[@yessintaktak9200]

Hello john . I am a big fan of your content can you make a roadmaps for us form when need to start 😅❤

[@actng]

Thanks John you explained that very well

[@SchooiYT]

Nice Video!

[@ToniMorton]

calculator opens in my nightmares.

[@wiertgo]

I got an ad from you on this video

[@anthonymcevans8191]

“It is not by default installed” **laughs in Linux**

[@abandoninplace2751]

They are identifying files by extension. Nice.

[@user-fp7fs9xl2t]

Great Content ...

[@TheMAZZTer]

Oof, this is why blacklists can be problematic, with a whitelist they would not have had this problem.

[@BaggerPRO]

Except perhaps for the problem of naming this list as "white" 😁

[@joshallen128]

​@@BaggerPROblock allow lists?

[@BaggerPRO]

@@joshallen128 , Yeah, it looks like it's fashionable to call these lists that way now :)

[@BillAnt]

A block list is usually shorter than a white list, but it's just a matter of decision.

[@joshallen128]

@@BillAnt Deny list because block sounds like black with an accent

[@shadflur874]

How do u register for that forum?

[@planktonfun1]

every vulnerability whether or not its trivial, can and will be leveraged

[@ShadowManceri]

I find it very bizarre that you can execute a file in the first place. That seems like a bad idea in many ways.

[@user-hp2dr5qc8p]

How do you suggest to open a .txt file?

[@ShadowManceri]

@@user-hp2dr5qc8p .txt file should be read, not executed.

[@johndeaux8815]

Hate the red border on the thumbnails, I assume I've already watched and scroll past half the time

[@sophisticatedserpent1512]

The red bars in the thumbnail made me think I already watched this video.

[@ernestmugo1765]

Right, I thought so too!

[@sevuszeld5015]

the title of the video is not that nice because i thought it would be a vulnerability that accurs right now. anyways. Thanks for sharing.

[@mrhassell]

Requires Python to be installed in the local path as a global environment variable.

[@sa1t938]

it requires the file extension to be registered to the python interpreter, not anything to do with environment variables

[@PasqualItizzz]

Tis the season to find folly, tra la la la la, la la la lol

[@Bromon655]

3:28 lol. They backed themselves into a corner with that statement.

[@allxrise]

They might have been logging something like "There is no any program to open this file-type/mime-type" perhaps? Or they just RCE'd to everyone... Who knows?

[@Bromon655]

@@allxrise I’m more inclined to believe they were just fabricating a number as an attempt at damage control

[@runedust9875]

Having a whitelist instead of a blacklist would prob. be more secure and reliable. Basic security not?

[@tablettablete186]

I was thinking the same

[@xion637]

@@tablettablete186 governed by implicit deny. Also agree.

[@user-mk3zz8zn9b]

nah, its not think again

[@rian0xFFF]

depends on size

[@oncetwice6366]

Who's idea it was to hardcode bunch of files there. They'll just keep updating it every timea new file type that can execute code comes? Sounds like horrible idea.

[@higurashinerd]

Part of whyI never share diagnostic data with devs. It’s so nosey now

[@dimike96]

Surely some communities would have a very high hit rate for python being installed on a windows machine right?

[@crism8868]

Yup. All data science and AI nerds.

[@Bromon655]

Anybody even slightly interested in programming has a decent chance of having it installed on their computer. I refuse to believe less than 0.01% of users were affected.

[@paulwesley3862]

​@@Bromon655a) is the 6th most downloaded app - is your grandma programming? b) die this you must use it on your PC. how many people just have it on their phone?

[@hackcode2240]

Amo tus videos

[@BreadGuy0]

Everybody be acting gangsta until calculator auto launches

[@kipchickensout]

"Google Photos would like to make Phone calls"

[@fokyewtoob8835]

Music to my ears

[@kuperrr6776]

Hey how can i get an xss is account? i tried and always the same when i create an account "Your account has been declined."

[@commanderpaladin]

I like cats. Btw we can all be farmers. No tech no rce problems 😎

[@mrfoodarama]

Oooff... thank you John... cant believe im one of those 0.01% .. slackin

[@paul-olof]

Haha so specific but I would've been at risk

[@zheil9152]

1:48 macOS has it installed by default, last I checked at least

[@dom1310df]

Does mac have a similar concept of file extension associations as on windows, so a pyzw file will open with python by default?

[@chiroyce]

Not anymore, used to have Python 2.x

[@momentum9319]

what is "flair"

[@guilherme5094]

👍Nice.

[@benherbst3620]

CRAZY

[@manasmahanand732]

With a bit of social engineering this could have been pretty terrible

[@kingoftheorient]

A lot of noodles will be leaked for sure.

[@Javv1721]

Me as python developer and windows user💀

[@Mat2095]

But, isn't pyzw supposed to be a zip-archive? That contains a __main__.py? I'm actually surprised this runs at all.

[@reijin999]

yeah but it updates every hour so it's chill

[@Pem7]

2024 is on fire with RCEs🤞🏾

[@BU5TER288]

oh no.. now i feel so dirty i cant wash it off

[@DoingFedTime]

Bad stuff for many. One of the reasons I always tell people to NOT use this medium.

[@aaronguerrero2003]

There is always a way in😉

[@Axodus]

Good, they banned my account for no reason.

[@furrygem5176]

"Certified rce moment" 💀

[@r35p3ct00]

Такое чувство, что на безопасность всем насрать, только ты можешь себя обезопасить, не кликая на всякое говно

[@RebziSquad]

Если человек наивный, то его никакая защита не спасет) Однажды мой знакомый запустил подозрительный tampermonkey скрипт в дискорде, говорит "2FA стоит же, чего бояться?". В конечном итоге украли его токен и смогли получить доступ к аккаунту.

[@EnitinEnitin]

This is why you should use whitelists instead of blacklists.

[@legendarycuber9205]

I got a SYNK ad with John right before the video and was confused why there was a skip button 😂

[@user-mc8xt1iq7c]

bro, youtube just showed me your ad, on your own video. theyre wasting your ad money

[@SimplyGamer605]

Hey, nice video, but just one thing. Your audio and video dosent seem to be perfectly in sync and its getting on my nerves

[@ZaberfangX]

Is it safer just makes a user that is not admin user? So if code ran its needs admin user right as default user windows always user are admin?

[@lunaxquinn]

Linux users are way more likely to have python installed out of the box so i wouldn't call this a "very specific" exploit.

[@maktiki]

I think the problem is Windows. It runs everything too fast without permission.

[@StealthSec-BugBounty]

Ohh no

[@rigsshiver823]

tf is going on .. rce 💀

[@IlIlIIlIlIlIlIlIl]

Good thing I run it in a vm on a vps

[@Luzum]

vm escape + pyzw = your vps gets owned

[@luizzeroxis]

How is this RCE? It's just running the code that someone sent to you. There's no difference between that and opening an exe.

[@definitelyno]

You can add an extra dot at the end. Windows -> Run -> 'calc.exe.' -> Enter opens calc. Does that work to bypass.

[@LibraryOFSounds]

Yeah uae does not like private messaging.

[@rafayahmed6259]

😅😅

[@LibraryOFSounds]

@@rafayahmed6259 Do you know uae connection with then twitter ? Or the documentary about state hackers of usa training uae agents. That documentary is so interesting

[@impostorsyndrome1350]

I have Python installed on Windows computer... It helps with learning Python programming, idk why people are so against it.

[@zombi1034]

Yea, not sure why he made it seem like something extremely unusual. I think most people that do any kind of programming and use Windows will have python installed.

[@Slada1]

Why would you learn python if you could not use it? :D

[@impostorsyndrome1350]

@@Slada1 wdym not use it? You can use it to create various programs.

[@robotron1236]

You should watch Telegrams owners interview with Tucker Carlson. They have like 30 employees and have never spent a dime on advertising. 😂

[@entertain8648]

Why are you laughing though?

[@couldntgivafuk]

I've never liked the idea of "allow" and "deny" list... just deny all and allow the user to specify.

[@FRITTY12348546]

But was it a typo :D

[@user-fe5mz9mq5o]

i found this exploit 2 years ago... never posted anything about it

[@rodricbr]

this is such an interesting rce tho... lol

[@kipchickensout]

python on windows, not that unnatural

[@Reelix]

"Windows that has python installed" you claim is extremely odd. That... Is an extremely odd statement.

[@jamesciastko8861]

What is happening lately? 💀💀

[@Aghnanster]

Ive heard this is on discord also

[@Luzum]

it is not

[@adenosinetp10]

can you stop using the word "stupid" so frequently and often?

[@christoferrian]

hello world

[@TheAwillz]

Sometimes you guys are very clever with tech but not so clever with people…

[@dkizilkaya6839]

This was surely done by purpose. Believe me not.

[@YouTubeName-hw1uk]

Anf i thought wiiu wansthe only thing that has rce 😂

[@oracuda]

how do RCEs still exist in 2024 bro 😭😭😭😭😭

[@crlfff]

They are found in everything

[@KLR-3]

Why do they blacklist file types they believe are unsafe. They should be whitelisting filetypes that are safe. If some new software comes along that belongs in the unsafe catagory they have to know about the related filetype and then add it to the blacklist...

[@wafinashwan8242]

whitelist would take too long.

[@erroroliver]

​@@wafinashwan8242got any quote from a developer?

[@johnsmith34]

"Reimplemeent file open confirmations" has a noWarning list, so I think that's done now.

[@KLR-3]

​@@wafinashwan8242how so?

[@johndoublew3060]

@@wafinashwan8242 how come

[@BouleyMusic]

wonder if you could just do the same with .bat file that puts itself in the shell:startup folder upon clicking the "video"

[@TheRealJohnJokes]

I edited my comment so no one knows what I said!

[@DavidFrankland]

echo y | format c:

[@imranapervez1886]

😊