Fake government portals exploit Telegram's Bot API for real-time credential theft. Sni5Gect framework exposes 5G pre-authentication flaws across major phone brands. Kimsuky (APT43) targets South Korean embassies with XenoRAT malware via multilingual spearphishing.