On January 5, 2023, a user of the Rocket.Chat server operated by the Islamic State (ISIS) posted a "spy alert," warning against a Telegram user allegedly claiming to represent a pro-ISIS media outlet, who purports to offer written guides for using explosive, tricking jihadis into installing spyware on their phones. The original poster noted they had screenshots of their correspondence with the user, saying others can ask for them via direct message.
Another user commented on the post, mocking the attempt of "spies" using outdated methods to trick others. A third user posted the cover of the latest publication by a pro-ISIS foundation, which included instructions for preparing hexamine explosives, also listing the foundation's Telegram bot, showing how it differs from the content offered by the alleged spy.