Telegram’s Crackdown Changed How Threat Actors Act, But Not Where They Act

Telegram’s Crackdown Changed How Threat Actors Act, But Not Where They Act

Telegram ramped up moderation dramatically in 2025, removing over 43 million channels and groups, but enforcement produced containment rather than eradication as criminal ecosystems adapted. Continuous monitoring, dynamic detection, and rapid remediation remain essential for security teams to track resilient threat actor activity. #Telegram #CheckPointSoftware

Keypoints

  • Over 43 million channels and groups were blocked in 2025, yet many threat actors reappeared quickly.
  • Scaling moderation and automation increased containment but did not dismantle criminal networks.
  • Threat actors adapted with gated access, backup channels, performative compliance, and hybrid platform use.
  • Telegram’s reach and network effects kept it the dominant hub despite regulatory pressure and leadership turmoil.
  • Security teams need continuous Telegram monitoring, contextual intelligence, and fast remediation actions.

Read More: https://thehackernews.com/expert-insights/2026/03/telegrams-crackdown-changed-how-threat.html