Privacy-centric messaging platform Telegram has been adopted as a dark web-style marketplace by the cybercriminal community, new research has shows.
Conducted by security firm Cybint in collaboration with the Financial Times, the research points to a sharp uptick in cybercriminal activity in Telegram channels, some of which have tens of thousands of members.
Cybercriminals are reportedly using the Telegram platform to peddle stolen data and hacking tools, and to share information about recent data leaks that could provide material for future attacks.
- Here's our list of the best password managers right now
- Check out our list of the best security keys out there
- We've built a list of the best identity theft protection services around
Telegram: The new dark web?
Another factor that makes the platform attractive to cybercriminals is its simplicity, especially when compared with underground forums on the dark web, which have a smaller pool of users and are more fiddly to access.
“Due to the tools freely available to hide in the shadows, the dark web has slowly transitioned over to the open web as social media has a bigger shop front,” Jake Moore, Cybersecurity Specialist at ESET, told TechRadar Pro.
“The millions of users available on social media and channels such as Telegram mean that criminals have moved over to access the bigger pool of potential customers. And there is very little to be done to stop these marketplaces from cropping up.”
The Cyberint investigation revealed a 100%+ increase in cybercriminal activity on Telegram, (although the time-frame was not specified). Meanwhile, the use of terms such as “combo” and “email:pass”, which indicate complete sets of stolen credentials are available to purchase, in Telegram channels is said to have risen by more than 300%.
Many other types of personal data are also floating around on the platform, including banking credentials, credit card details and passport numbers.
The research findings put Telegram in a difficult position; the company must either compromise on its privacy-first principles and comparatively laissez faire attitude to moderation, or else allow criminal activity to proliferate on its platform.
TechRadar Pro has asked Telegram for comment on the research and for clarification with regards the steps the company is taking to squash illegal activity on its platform.
- Take a look at our list of the best VPN services on the market
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Joel Khalili is the News and Features Editor at TechRadar Pro, covering cybersecurity, data privacy, cloud, AI, blockchain, internet infrastructure, 5G, data storage and computing. He's responsible for curating our news content, as well as commissioning and producing features on the technologies that are transforming the way the world does business.