Modify Authentication Process: implant 2FA on victim Telegram account

discovered 2026-05-03

Hardcoded 2FA password and recovery email installed on victim accounts via Telegram updateTwoFaSettings, with the operator's IMAP mailbox auto-submitting the confirmation code.