Telegram is no longer a "haven" for cybercriminals.

(Dan Tri Newspaper) - Many illegal activities are still taking place on the Telegram platform. However, the reality shows that cybercriminals are increasingly finding it difficult to maintain their "underground" operations.

For many years, Telegram has been a platform where cybercriminals can easily build and maintain illegal activities.

With just one bot, malicious actors can process the activity data of hundreds of people every day, receive cryptocurrency payments, and distribute stolen bank card information...

Cybercriminals are gradually abandoning Telegram (Image: Tech Wire Asia).

Telegram's unlimited file storage and perpetual storage feature also allow malicious actors to easily share large leaked databases or stolen internal documents without needing to store them on external servers.

This extremely easy and fast automation mechanism has facilitated large-scale, inexpensive, and low-tech illicit transactions, such as bank card data, other data, or malware hosting services.

Kaspersky researchers have discovered two distinct trends in illicit activities taking place on Telegram. First, the average lifespan of criminal channels is increasing significantly. The percentage of channels existing for more than 9 months in the 2023-2024 period increased more than threefold compared to the 2021-2022 period.

Secondly, the blocking and removal of these channels on Telegram has increased significantly. These measures have made it much more difficult for malicious actors to operate.

As a result, some long-standing underground communities have begun shifting their operations to other platforms or using their own messaging apps, due to constant disruptions on Telegram.

“Cybercriminals view Telegram as a convenient tool for many illegal activities, but they are also beginning to weigh the risks and benefits. Many channels can now last longer than they did a few years ago, but the surge in blocked channels means criminal groups can no longer rely on long-term stability.”

Maintaining stable underground operations has become extremely difficult. From observation, we see the first signs of a wave of “migration” to other platforms. This is a clear consequence of the tightening measures on these platforms,” said Vladislav Belousov, Digital Footprint Analyst at Kaspersky.

Source: https://dantri.com.vn/cong-nghe/telegram-khong-con-la-thien-duong-cua-toi-pham-mang-20251211215907946.htm