原推：@elies conceivable (and consistent with how people use telegram) that the attacker could have lifted additional invite links from the groups that he was already surveilling?
ie invite links were being shared in groups that were presumed to be already semi-private…
https://twitter.com/wintonARK/status/1534258842107686913