In September 2020, it had been described that Iran's RampantKitten espionage group ran a phishing and surveillance marketing campaign in opposition to dissidents on Telegram.[362] The attack relied on individuals downloading a malware-infected file from any resource, at which issue it could change Telegram data files about the product https://www.telegramkko.com/