Threat Actors leveraging Telegram to build malware

Cyble Research Labs identified the 'Eternity Project', a commercial malware ecosystem advertised on TOR and a Telegram channel that offers modular malware (stealer, clipper, miner, worm, ransomware, and an in-development DDoS bot) with a Telegram-based builder for customized payloads. The report documents module capabilities, pricing, build steps, operational features (e.g., anti-VM, persistence, Telegram reporting), and supplies MD5/SHA1/SHA256 IOCs, concluding with mitigation recommendations and continued monitoring.