Telegram Increasingly Used to Sell Access, Malware and Stolen Logs

CYFIRMA research finds Telegram has evolved into a resilient, automated marketplace and operational layer for cybercrime: brokers sell initial access to corporate networks, malware-as-a-service subscriptions (including stealers and loaders) are offered, massive searchable stealer log “clouds” are traded, and hacktivist/ransomware groups use channels for coordination and public shaming. Despite increased data-sharing with law enforcement, the platform’s ease of creating new channels and bot-based automation has accelerated the professionalization and scale of criminal activity on Telegram.