How did it all start?
Experts from the cyber intelligence group Cyberint, with the support of the Financial Times, discovered a growing
Where do cybercriminals usually “work”?
The Darknet is a hidden network, the connections of whichare installed only between trusted peers, sometimes referred to as "friends", using non-standard protocols and ports. The darknet uses its own DNS, that is, domains, and address space.
You can get into the darknet using special software- for example, Tor Browser or I2P. Tor is a browser that encrypts traffic when you are inside, but it can still be tracked in and out.
There are many different resources on the darknet, includingincluding those that specialize in database leaks and the sale of information from them: (cellular operators, banks, government services). There are also anonymous email services, portals for communication and discussion of any (including prohibited) topics, analogues of social networks and online libraries. The darknet is best known for its marketplace: there are resources for selling goods, the circulation of which is limited by law or completely prohibited.
Most often, various databases are sold on the darknetdata, data from account hacking - mail, social networks, instant messengers, current accounts and bank cards issued to dummies, fake documents and much more.
What's happening on Telegram?
“We have recently witnessed more than100% growth in Telegram use by cybercriminals, says Tal Samra, cyber threat analyst at Cyberint. "Its encrypted messaging service is becoming increasingly popular with fraudulent activities that sell stolen data."
Experts have already called Telegram newdarknet. In many cases that experts have studied, the published content resembles marketplaces on the darknet. It is the impunity and accessible publication of confidential data that gives Telegram its resemblance to a shadow network.
Why exactly Telegram
Cybercriminals are attracted by the platform's ease of use and simple content moderation.
To get started, registerTelegram does not require special equipment or software. The publication of content is not pre-moderated - other users can complain about the content only after posting. In addition, the messenger does not have permanent support - any request is considered by a group of volunteers.
Analysts also note that growthcybercriminal activity is caused by a new influx of users. At the beginning of 2021, Whatsapp issued an ultimatum - everyone who uses the messenger must accept the new privacy policy. People and even departments began to abandon the application en masse. Sometimes in favor of Telegram. As you know, the messenger, according to its privacy policy, has access to the information that the user indicated in his profile, telephone numbers of the user and interlocutors, messages outside secret chats, and mailing address, if indicated by the user.
What awaits Telegram?
Popularity of the platform among cybercriminalsmay increase pressure on the service administration to introduce more thorough content moderation. It was previously reported that the company plans to go public and is considering options for introducing advertising.
At the same time, according to Cyberint, the number of mentions in Telegram of “Email: pass” and “Combo” has increased fourfold over the past year.
Thus, experts discovered the combolist channel withmore than 47 thousand subscribers, where hundreds of thousands of logins and passwords from various services, including Yandex, Google and Yahoo, were regularly published. The Telegram administration removed the channel at the request of the Financial Times.
Read more
The Earth began to spin faster: why is this happening and is there a danger
The descendants of animals that survived after a possible asteroid fall still live on Earth
Physicists have cooled atoms to the lowest temperature in the world
Хакерские термины. Это значит, что пользователь распространяет украденные списки адресов электронной почты и пароли.