"So this malware used telegram for C2 purposes. Telegram is such a piece of shit that they could recover the entire message history right up to the development phases of that malware, and from there the researchers could see who actually wrote and used it."

twitter.com/mjos_crypto/status/1085890350898651137