Use the Telegram "Report" feature to report the user sending these files [1].

The malware can steal session tokens, allowing attackers to log in as you without needing a password. Recommended Protective Actions

These zip files often contain executable files ( .exe , .scr ) designed to steal saved passwords, browser cookies, cryptocurrency wallets, and personal Telegram data [1].