Telegram zero-day for Android allowed malicious files to masquerade as videos (therecord.media)