Telegram Help Group

Hello Telegram Support, I'm writing on behalf of my friend whose Telegram account has been hacked. They clicked a malicious "Here is your photo" link. The hacker waited a few days and then enabled unauthorized 2-step verification, locking my friend out. They were using Telegram X. We are very concerned the hacker is sending malicious links to their contacts. What steps can be taken to recover their account or, at minimum, suspend it immediately to prevent further harm? Thank you for your help.