Read an analysis reporting that Nekogram’s Android client contains a backdoor that collects phone numbers.

thebadinteger.github.io/nekogram-phone-exfiltr…
logging peoples phone numbers homepage screenshot

About logging peoples phone numbers

This website is an English and Russian security analysis of Nekogram 12.5.2, an Android client for Telegram. Its author examined decompiled source code and reports finding a backdoor that collects phone numbers of accounts logged into the app and uploads them to a bot. The page states that this behavior is present in distributed builds, including the version on Google Play.

The page presents these findings as the author's own analysis. It describes the code location (a file named Extra.java), the account-enumeration logic, the data-sending method (inline queries to a named Telegram bot), and several decrypted strings. It ends by advising users to use only the official Telegram client. The source does not describe independent verification of the findings, and it covers only the 12.5.2 version. The directory has not verified these claims.

Key features

  • Analysis of decompiled source code from Nekogram version 12.5.2
  • Identifies the file and function the author attributes the behavior to
  • Code excerpt showing how the app iterates over up to eight accounts
  • Describes sending data through inline queries to a named Telegram bot
  • Lists decrypted constants and their stated context
  • Parallel English and Russian versions of the same analysis
Best for: Security researchers and privacy-focused Android users who want to review the author's technical claims about Nekogram before deciding which Telegram client to use.
Good for
  • Gives specific technical detail, including file names, function names, and code excerpts
  • Provides the same analysis in English and Russian
Watch out for
  • The findings are one author's claims and the source does not describe independent verification
  • Covers only Nekogram version 12.5.2

logging peoples phone numbers at a glance

Type
Website
Pricing
Not confirmed. Check the site
Platforms
Android, Web
Open source
Not stated
Language
English
Last checked
Oct 6, 2026 · Online when checked
Listed
Oct 5, 2026

logging peoples phone numbers alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 24 alternatives

Popular in Security Research

Well-known listings from the same topic.

All 50

logging peoples phone numbers FAQ

Which version of Nekogram does the analysis cover?
The analysis covers Nekogram 12.5.2.
Where does the analysis say the malicious code is located?
The analysis says the code is concealed in a file named Extra.java and that the compiled binaries contain logic not shown in the public GitHub repository's version of that file.
Does the analysis say the behavior appears in the Google Play version?
Yes. The analysis states that the behavior is present in distributed versions, including the version available on Google Play.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing