Telegram's Crackdown Changed How Threat Actors Act, But Not Where They Act
Summary: Telegram blocked more than 43 million channels and groups in 2025 as moderation volumes climbed sharply and stayed high into early 2026, with some single days reaching hundreds of thousands of removals. Check Point's analysis found carding operations, Fullz marketplaces, and hacking communities were disrupted repeatedly but rarely dismantled, with the same actors reappearing under new names and links, often within days.
What you should know: Telegram still outpaced every other messaging platform by orders of magnitude in invite links shared across underground forums, with the closest alternative under six percent of the volume - so the takedowns raised the cost of operating openly without forcing anyone to leave.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026