they would also have to allow Android Package Kit (APK) file installation from the Telegram app. So users would have to take a number of actions in order to enable the malicious payload ...
The vulnerability allowed threat actors to create malicious .APK files (Android installation packages) which, to the recipient, look like a video message. Since Telegram automatically downloads ...