Telegram is a Wide-Open Marketplace for Phishing Tools

Guardio researchers detail how Telegram has become a large-scale marketplace for phishing-as-a-service, where criminals can cheaply assemble end-to-end campaigns with scampages, hosting, email-sending tools, target lists, and monetization channels, often featuring capabilities like 2FA bypass and automated account takeover. Citing corroborating research from Kaspersky and ESET (e.g., Telekopye bot toolkits), the report highlights the commoditization of phishing, the role of public channels and bots in promotion and support, the resale of stolen credentials, and the widespread abuse of legitimate services—urging site owners to harden platforms against misuse.