Security News > 2022 > August > How cybercrims embrace messaging apps to spread malware, communicate

Cybercriminals are turning to messaging apps like Telegram and Discord as alternatives to popular underground forums: not only for the private communications and security features but also as avenues for spreading malware.

The migration to Telegram and Discord illustrates the dynamic nature of criminal groups and the world in which they operate, according to Garrett Carstens, director of intel collection management at the company.

Some threat groups also use Discord's content delivery network to host malware payloads while others leverage Telegram bots to intercept one-time password tokens, according to Intel 471.

Telegram offers near real-time encrypted communication if both parties are online at the same time and don't bring with them that same security risks as underground forums, from a lag time in messaging to a history of compromises and data dumps, Intel 471's Carstens said.

The embrace by threat groups of Telegram and Discord could be a boon for cybersecurity vendors, Carstens said.

Whether more threat groups shift their communications to Telegram "Will depend on how Telegram reacts to the influx of cybercriminals using the platform," Carstens said.

News URL

https://go.theregister.com/feed/www.theregister.com/2022/08/02/threat_groups_discord_telegram/