This is a Telegram psyop: 
"Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform"
worth the read
https://gist.github.com/hackermondev/45a3cdfa52246f1d1201c1e8cdef6117
Discussion
Nothing surprises me anymore, could be.
telegram also got caught rolling their own broken encryption. soooo....
If the 3 letters can't crack it, they declare it broken.
no it actually was broken encryption. just a quick Google. https://cyberscoop.com/telegram-app-security-encryption/