Vidar infostealer evolves into a fileless 2026 threat. From fake CAPTCHAs to "Claude Code" leaks, see how it steals crypto and passwords via Telegram C2.

Group-IB unmasks the Phoenix System: a PhaaS platform using rogue cell towers and live-dashboards to bypass MFA across 2,500+ domains. Read the full report.

Hackers use FEMITBOT to launch Telegram-based crypto scams and deliver Android malware through fake apps and trusted brand impersonation.

Hackers are using Fake interview apps to spread JobStealer malware on macOS and Windows to steal crypto wallets, browser data, and passwords.

This article shows my fast approach to investigating Telegram — channels, users, and bots.

Why every threat hunter, cyber researcher, and OSINT analyst should be paying closer attention.

In the last few years, Telegram has become more than a messaging app: it’s a distribution layer for communities, narratives, leaks, and…

Pavel Durov recently announced expanded capabilities for all automated systems on the platform. Specifically, Telegram now supports intricate HTML and Markdown structures. Consequently, bots can g…

The malware never phoned home to a hacker’s server. It just asked a Telegram bot what to do next — every few seconds.