ESET researchers discovered a zero-day Telegram for Android exploit that allows sending malicious files disguised as videos