DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram

Sayak Saha Roy, Elham Pourabbas Vafa, Kobra Khanmohamaddi, Shirin Nilizadeh

34th USENIX Security Symposium · Day 1

This article delves into the critical findings presented in the USENIX Security paper "DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram." The research, conducted by Sayak Saha Roy, Elham Pourabbas Vafa, Kobra Khanmohamaddi, and Shirin Nilizadeh, uncovers the burgeoning threat posed by **Cybercriminal Activity Channels (CACs)** on Telegram, a platform increasingly favored by malicious actors due to its vast user base and perceived lax content moderation. The paper provides the first large-scale, systematic analysis of these broadcast-style channels, which collectively cater to over 23.8 million users, distributing a wide array of illicit content ranging from compromised credentials to sophisticated blackhat hacking tools.

AI review

Solid measurement paper that does the boring-but-necessary work of systematically cataloging Telegram's cybercrime ecosystem. The 339-channel dataset and BERT classifier are genuinely useful contributions. Not revolutionary, but the 28% phishing rate and 38% malware-in-executables numbers are concrete data points defenders can actually cite.