Phishing Kits and Campaigns: How Threat Actors are Exploiting Telegram

In recent months, cybersecurity researchers have discovered an alarming trend of threat actors using the popular messaging platform Telegram to peddle phishing kits and set up phishing campaigns. This new methodology of exploiting messaging apps is a worrying development and a reminder that cybercriminals are not just relying on traditional email phishing attacks to steal personal data.

Statistics

According to the Russian cybersecurity firm Kaspersky, over the past six months, it has detected more than 2.5 million malicious URLs generated using phishing kits. This number is incredibly high and highlights a significant increase in the number of phishing campaigns being conducted using Telegram.

Telegram bots

One of the most popular services offered by threat actors is the use of Telegram bots, which automate the process of generating phishing pages and collecting user data. These bots are sold on the dark web, and cybercriminals can buy them easily for a surprisingly low cost.

Personal data sharing

In some cases, phishers have even been observed sharing the personal data of users with other subscribers for free, in hopes of attracting aspiring criminals. This information can be used to carry out further attacks, making it an incredibly high-risk situation for individuals.

Paid services

Some of the more advanced phishing kits include features such as anti-bot detection, URL encryption, and geoblocking, making them even harder to detect. These kits are sold for anywhere between $10 and $280, highlighting the vast sums of money cybercriminals can make by conducting these types of attacks.

Sale of Personal Data

Another profitable business for cybercriminals is the sale of personal data, particularly bank account credentials. These details are advertised at different rates based on the balance of the account, highlighting the ruthless nature of these criminals.

Phishing-as-a-Service

Phishing services are now commonly marketed via Telegram on a subscription basis, known as phishing-as-a-service (PhaaS). Developers offer a monthly fee to rent the kits in return for providing regular updates, making it an incredibly cost-effective way of carrying out cyberattacks.

Low barrier to entry

“The threshold for joining the phisher community lowered once malicious actors migrated to Telegram and started sharing insights and knowledge, often for free, right there in the popular messaging service,” says Olga Svistunova, Kaspersky web content analyst. The ease with which these criminals can share information and their experiences with each other makes Telegram a breeding ground for these types of attacks.

Phishing attacks remain a significant problem in the cybersecurity world, and the use of messaging apps like Telegram only makes it easier for criminals to deploy their tactics. Individuals and organizations alike must be vigilant in protecting their personal information and adopt proper cybersecurity measures to prevent themselves from falling prey to these attacks. As we move forward, it is likely that we will see more creative and sophisticated approaches used by threat actors, highlighting the importance of staying up to date with the latest trends in cybersecurity.

Explore more

Robotic Process Automation Software – Review

In an era of digital transformation, businesses are constantly striving to enhance operational efficiency. A staggering amount of time is spent on repetitive tasks that can often distract employees from more strategic work. Enter Robotic Process Automation (RPA), a technology that has revolutionized the way companies handle mundane activities. RPA software automates routine processes, freeing human workers to focus on

RPA Revolutionizes Banking With Efficiency and Cost Reductions

In today’s fast-paced financial world, how can banks maintain both precision and velocity without succumbing to human error? A striking statistic reveals manual errors cost the financial sector billions each year. Daily banking operations—from processing transactions to compliance checks—are riddled with risks of inaccuracies. It is within this context that banks are looking toward a solution that promises not just

Europe’s 5G Deployment: Regional Disparities and Policy Impacts

The landscape of 5G deployment in Europe is marked by notable regional disparities, with Northern and Southern parts of the continent surging ahead while Western and Eastern regions struggle to keep pace. Northern countries like Denmark and Sweden, along with Southern nations such as Greece, are at the forefront, boasting some of the highest 5G coverage percentages. In contrast, Western

Leadership Mindset for Sustainable DevOps Cost Optimization

Introducing Dominic Jainy, a notable expert in IT with a comprehensive background in artificial intelligence, machine learning, and blockchain technologies. Jainy is dedicated to optimizing the utilization of these groundbreaking technologies across various industries, focusing particularly on sustainable DevOps cost optimization and leadership in technology management. In this insightful discussion, Jainy delves into the pivotal leadership strategies and mindset shifts

AI in DevOps – Review

In the fast-paced world of technology, the convergence of artificial intelligence (AI) and DevOps marks a pivotal shift in how software development and IT operations are managed. As enterprises increasingly seek efficiency and agility, AI is emerging as a crucial component in DevOps practices, offering automation and predictive capabilities that drastically alter traditional workflows. This review delves into the transformative