Telegram zero-day let hackers spread backdoor and cryptocurrency-mining malware