CEO's Arrest Will Likely Not Dampen Cybercriminal Interest in Telegram

The report assesses that Pavel Durov's arrest in France is unlikely to materially disrupt cybercriminal and nation-state use of Telegram in the short term, noting the platform's attractive OpSec features (encryption, self-destructing messages, large groups, virtual-number signup) and its role in malware distribution, C2, ransomware coordination, phishing and illicit data markets; while increased scrutiny or policy changes could cause some actors to migrate, a mass exodus is unlikely absent evidence that Telegram's security itself has been compromised.