Alert warns of cyber actors using Telegram messaging app to push malware 

Mar 23, 2026 - 03:20 PM
Cybersecurity Lock on Gold Wall

The FBI released an alert March 20 warning of a technique used by cyber actors working on behalf of the Iranian government to conduct malicious cyber activity. The FBI said the cyber actors are using the Telegram messaging app to push malware targeting individuals and groups globally, which has resulted in data leaks and reputational harm for victims. The FBI said it issued the alert due to ongoing geopolitical tensions. The alert includes recommendations to mitigate harm against any potential attacks. 

For more information on this or other cyber and risk issues, contact John Riggi, AHA national advisor for cybersecurity and risk, at jriggi@aha.org and Scott Gee, AHA deputy national advisor for cybersecurity and risk, at sgee@aha.org. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity. 

Related News Articles

Headline
Critical vulnerability discovered in certain Citrix products 
A new critical vulnerability has been discovered in Citrix NetScaler ADC and NetScaler Gateway products, the company announced Oct 8. Citrix said the…
Chairperson's File
Chair File: Strengthening Cybersecurity to Protect Patients and Our Hospitals’ Mission
Public
What does patient safety mean to you? For many, patient safety means what we can see: hand hygiene, infection prevention and control practices, medication…
Headline
Agencies warn of Chinese government-linked cyber actors using hacking tools to steal sensitive data
A joint advisory released Oct. 8 by U.S. and international agencies warns of Chinese government-linked cyber threat actors using automated and hands-on hacking…
Headline
NSA recommends adoption of zero trust controls to improve cybersecurity of essential functions
The National Security Agency Oct. 8 released guidance for critical infrastructure organizations that recommends adopting high-impact zero trust strategies to…
Headline
Agencies warn of credential-compromising campaign actively targeting critical infrastructure networks
The FBI and Secret Service released an advisory Oct. 6 warning of ongoing activities by FortiBleed, a global credential-compromise campaign used by threat…
Headline
Blog explores how clinical continuity and collaboration strengthen cyber resilience
In a new blog, John Riggi, AHA national advisor for cybersecurity and risk, and Scott Gee, AHA deputy national advisor for cybersecurity and risk, highlight…