Telegram Bot API Connections Outside the Telegram Client Hunt for Cortex XDR

Goksel Atakan@gokselatakan

•updated 2 days ago•4•0•15

Detects network communication to api.telegram.org from a process that is not identified as an authorized Telegram client application, potentially indicating command and control (C2) activity.