Telegram Desktop vulnerability allowed any user's file to be stolen
https://beaksec.github.io/posts/telegram-desktop-one-click-account-takeover/