Malicious PyPI packages give hackers control of Telegram bot servers

A malicious campaign has been ongoing since November, targeting developers who build Telegram bots using Python. The attackers are using trojanized Pyrogram forks to compromise servers, allowing them to read arbitrary files on the affected systems. This gives hackers control of the Telegram bot servers that have been compromised. The campaign specifically targets Python developers working with Telegram bots. The trojanized packages are being distributed through PyPI.