Attackers are impersonating Key Opinion Leader (KOL) accounts to deceive users into joining exclusive “Alpha” groups. These groups replicate fake bot verification safeguards to either steal Telegram account credentials or deploy malware, such as trojans, on users’ devices.
Q1: What is the first step of this scam?
A1: Scammers impersonate KOLs to lure users into joining groups
Q2: What are the warning signs during bot verification?
A2: ALL（Request to provide 2FA one-time codes, Requirement to download software, Prompt to share user credentials, Instruction to run a script to verify as human）
