In September 2020, it had been claimed that Iran's RampantKitten espionage group ran a phishing and surveillance marketing campaign against dissidents on Telegram.[362] The attack relied on folks downloading a malware-infected file from any source, at which level it would swap Telegram data files around the gadget and 'clone' session data.Telegram