Phishing Kits and Campaigns: How Threat Actors are Exploiting Telegram

April 7, 2023

Image Credit: Unsplash

Phishing Kits and Campaigns: How Threat Actors are Exploiting Telegram

In recent months, cybersecurity researchers have discovered an alarming trend of threat actors using the popular messaging platform Telegram to peddle phishing kits and set up phishing campaigns. This new methodology of exploiting messaging apps is a worrying development and a reminder that cybercriminals are not just relying on traditional email phishing attacks to steal personal data.

Statistics

According to the Russian cybersecurity firm Kaspersky, over the past six months, it has detected more than 2.5 million malicious URLs generated using phishing kits. This number is incredibly high and highlights a significant increase in the number of phishing campaigns being conducted using Telegram.

Telegram bots

One of the most popular services offered by threat actors is the use of Telegram bots, which automate the process of generating phishing pages and collecting user data. These bots are sold on the dark web, and cybercriminals can buy them easily for a surprisingly low cost.

Personal data sharing

In some cases, phishers have even been observed sharing the personal data of users with other subscribers for free, in hopes of attracting aspiring criminals. This information can be used to carry out further attacks, making it an incredibly high-risk situation for individuals.

Paid services

Some of the more advanced phishing kits include features such as anti-bot detection, URL encryption, and geoblocking, making them even harder to detect. These kits are sold for anywhere between $10 and $280, highlighting the vast sums of money cybercriminals can make by conducting these types of attacks.

Sale of Personal Data

Another profitable business for cybercriminals is the sale of personal data, particularly bank account credentials. These details are advertised at different rates based on the balance of the account, highlighting the ruthless nature of these criminals.

Phishing-as-a-Service

Phishing services are now commonly marketed via Telegram on a subscription basis, known as phishing-as-a-service (PhaaS). Developers offer a monthly fee to rent the kits in return for providing regular updates, making it an incredibly cost-effective way of carrying out cyberattacks.

Low barrier to entry

“The threshold for joining the phisher community lowered once malicious actors migrated to Telegram and started sharing insights and knowledge, often for free, right there in the popular messaging service,” says Olga Svistunova, Kaspersky web content analyst. The ease with which these criminals can share information and their experiences with each other makes Telegram a breeding ground for these types of attacks.

Phishing attacks remain a significant problem in the cybersecurity world, and the use of messaging apps like Telegram only makes it easier for criminals to deploy their tactics. Individuals and organizations alike must be vigilant in protecting their personal information and adopt proper cybersecurity measures to prevent themselves from falling prey to these attacks. As we move forward, it is likely that we will see more creative and sophisticated approaches used by threat actors, highlighting the importance of staying up to date with the latest trends in cybersecurity.

Explore more

How Are A2A Payments Reshaping Global E-Commerce?

July 14, 2026

The traditional dominance of plastic-reliant credit card networks is finally crumbling as a more direct and cost-effective method of moving money begins to dominate the world of global digital commerce. For decades, the invisible architecture of the internet was built upon the foundations of the 1950s, using credit cards as a primary bridge between consumers and vendors. This system worked,

Aptar Unveils Durable Packaging Solutions for E-Commerce

July 14, 2026

The sticky residue of a leaked shampoo bottle pooling at the bottom of a cardboard box has become a familiar, albeit infuriating, ritual for many online shoppers today. This common consumer disappointment often marks the end of brand loyalty, as the unboxing experience—once a moment of high anticipation—transforms into a messy cleanup operation. For beauty and home care brands, ensuring

Intuit Enterprise Suite Delivers AI-Native ERP for Growth

July 14, 2026

The chasm between a mid-market company’s ambitious expansion goals and its actual operational capacity has historically been widened by fragmented software architectures that fail to communicate. While entry-level accounting tools serve their purpose during the early stages of a startup, they often become a liability as complexity increases, leaving finance teams to bridge the gaps with manual spreadsheets and guesswork.

Is macOS 27 Golden Gate More Than Just Apple Intelligence?

July 14, 2026

The launch of the macOS 27 Golden Gate public beta marks a significant evolution in Apple’s long-standing effort to reconcile high-level automation with the granular control required by power users. While the promotional narrative surrounding this release is dominated by the sophisticated capabilities of Apple Intelligence and a revamped Siri, the update offers far more than just a layer of

OpenAI Shifts to Outcome-First Prompting for GPT-5.6 Sol

July 14, 2026

The transition from instructional prompt engineering to a goal-oriented framework represents a seismic shift in how human operators interact with large language models during the current technological cycle. For years, the industry relied on meticulously crafted chain-of-thought instructions to ensure accuracy, but the arrival of GPT-5.6 Sol marks the end of this labor-intensive era. This new architecture prioritizes the final