Stealthy C2 messages operated by the Golang backdoor could easily be mistaken for legitimate Telegram API communication.