they would also have to allow Android Package Kit (APK) file installation from the Telegram app. So users would have to take a number of actions in order to enable the malicious payload ...