TrymeLocker Telegram Bot C2 Exfiltration via ipinfo.io and api.telegram.org

Ibrahim Saud@tektrix

•updated Jun 28, 2026•2•0•2

Detects network traffic associated with TrymeLocker malware, specifically targeting Telegram API communications containing hardcoded identifiers and geolocation lookups via ipinfo.io.