Researchers identified a weakness in the QR code authentication process used by some IP cameras to connect to Telegram. This flaw allowed hackers to potentially:

Background and technical context

Many modern IP cameras use QR codes for "Easy Setup," allowing users to link their surveillance feed directly to a Telegram bot for instant motion alerts and snapshots. However, attackers found they could generate that mimicked the Telegram Web authentication process.

in your Telegram app and terminate any sessions you don't recognize. Enable Two-Step Verification (2FA)

Many affordable, mass-market IP cameras (often marketed as baby monitors, pet cameras, or security cams) utilize a "Plug and Play" setup mechanism to make installation easy for non-technical users.

To secure your surveillance setup, you must apply patches at both the hardware and software levels: