On April 20, the Hanoi Police reported that Ms. T., a resident of Ba Dinh District, was recently scammed out of her money after receiving and opening a music/video file sent via Telegram.

According to Ms. T., on March 10, she received a message on Telegram containing a file in .m3u format - a common format for music or video playlists. Thinking it was a video by a well-known singer, she clicked to view it.

Shortly afterward, her bank account was suddenly debited by 400 million VND. Stunned and confused, she immediately contacted her bank and reported the incident to the police.

Cybersecurity experts explained that when Ms. T. opened the .m3u file using Telegram Desktop, the software may have automatically downloaded embedded external content without requiring user permission.

This exposed her device to potential data breaches, allowing hackers to gain system access and steal her account information.

Statistics show that over 32% of Internet users in Vietnam (aged 16–63) use Telegram, a multi-platform messaging app. Its growing popularity has made it a fertile ground for cybercriminals.

Without proper vigilance, millions of users may fall into similar traps. A seemingly harmless music or video file sent via Telegram Desktop can, in fact, be a tool for data theft.

These malicious files often come in the .m3u format. Once clicked, they can silently expose passwords, port connections, and system information.

Hackers don’t just rely on .m3u files - they also exploit common file types like .exe, .zip, and even Word or Excel documents embedded with malware.

Particularly dangerous is the “Pass-the-Hash” technique, which allows cybercriminals to access internal systems without knowing actual passwords. Once successful, they can take control of entire networks, causing serious harm to individuals or organizations.

Experts warn that many victims have lost hundreds of millions to even billions of dong through sophisticated scams on Telegram.

Part of the problem lies in Telegram’s structure: it allows users to create large groups and channels for free. Messages are end-to-end encrypted, and senders can delete all chat history on both ends - making investigations difficult.

Authorities urge the public to remain highly cautious when receiving files or links from unknown sources. It’s also essential to regularly update software, operating systems, and apps to patch security vulnerabilities and minimize the risk of attack.

Tien Dung