What Are the Alternatives to Telegram?

As Telegram introduces new AI-driven policies aimed at detecting and removing illegal content, a significant shift is taking place. Threat actors and cybercriminal groups are increasingly abandoning the platform. This migration highlights growing concerns over privacy, security, and anonymity — not just among bad actors but among everyday users as well. Once a bastion of privacy, Telegram is now seen as a compromised space in the underground world. Threat actors, hacktivists, and cybercriminal communities are searching for new platforms to operate with less risk of exposure to law enforcement.

Is Telegram’s Privacy Ethos Falling Apart?

On September 23, 2024, Telegram’s privacy stance took a dramatic turn. One of the most vocal critics of the platform’s recent updates was Deanon Club, a group associated with the notorious KillNet collective. In a public statement, they condemned Telegram’s new AI tool designed to identify and suppress illegal content, stating it would soon become as privacy-invasive as Instagram, WhatsApp, and Facebook. This AI technology, they argue, marks the beginning of the end for Telegram’s once-unshakable commitment to anonymity.

For Deanon Club, the changes represent a betrayal of Telegram’s original user base, particularly cybercriminals and hacktivist groups. The group claims that Telegram is now prioritizing law enforcement compliance over user anonymity, following in the footsteps of mainstream social media platforms.

Their advice to their followers? Be cautious. They recommend using VPNs, anonymous phone numbers, and complex, cloud-based passwords. For advanced users, setting up proxy servers within Telegram is encouraged. The message is clear: Telegram is no longer the safe it once was.

Why Are Threat Actors Leaving Telegram?

Multiple threat actors have already announced their plans to migrate away from Telegram. Here are a few notable examples:

• Anonymous Collective: Known for their decentralized activism, the Anonymous Collective expressed concerns about Telegram’s new data-sharing policies and has begun considering more private alternatives.
• CyberVolk: This hacktivist group is shifting its operations to platforms like Twitter (X), Session, and Discord. Their reasoning is simple — Telegram’s changes have compromised user privacy.
• Al Ahad: This Islamist group has urged its members to migrate to Signal, a platform famed for its end-to-end encryption and commitment to privacy.

Where Are They Headed Next?

With Telegram’s privacy protections weakening, cybercriminals are gravitating toward alternative platforms. Below are the most popular alternatives currently being adopted:

1. Signal

Why Signal? Simple — its end-to-end encryption makes it a top choice for those seeking true privacy. Signal goes one step further by not retaining metadata, which complicates efforts by law enforcement to trace communications.

2. Discord

Once a platform for gamers, Discord has evolved into a communication hub for all kinds of communities, including those with malicious intentions. Its servers allow large groups to organize and communicate efficiently, making it an attractive option for groups like CyberVolk. However, Discord does operate under U.S. law, meaning it is not as anonymous as some users would like.

3. Session

A newer platform, Session offers decentralized, anonymous messaging without the need for centralized servers. It requires no phone number or email for registration, a key feature for anyone looking to remain off the grid. CyberVolk has already started using Session for their communications.

4. X (formerly Twitter)

Although X is not known for privacy, it remains a popular option for cybercriminals because of its vast reach. The platform enables quick, widespread dissemination of information, and groups like CyberVolk value the platform’s ability to maintain a public presence.

5. Facebook (WhatsApp)

While Facebook has strict policies against illegal activity, its encrypted messaging service, WhatsApp, is still used by some threat actors. WhatsApp’s end-to-end encryption makes it a viable option for private communications, despite its mainstream presence.

Are Other Platforms Emerging as Alternatives?

In addition to Signal, Discord, and Session, decentralized platforms are gaining popularity. For instance, XMPP-based (Extensible Messaging and Presence Protocol) apps allow users to run private servers for enhanced privacy. Jabber, which uses this protocol, provides encrypted messaging options, while older IRC networks are seeing a resurgence due to their open-source nature. Meanwhile, dark web forums and platforms accessible only through Tor are becoming increasingly favored for their heightened levels of anonymity.

How Will Telegram’s New Policies Impact the Cybercriminal World?

Telegram’s policy changes, while aimed at curbing illegal activity, might have unintended consequences. Many of the platform’s most privacy-conscious users, including legitimate individuals, could start to leave. As threat actors seek alternatives, Telegram may lose a significant portion of its user base. However, the move could also result in fewer illicit activities on the platform.

The broader trend here is the ongoing cat-and-mouse game between law enforcement and cybercriminals. Threat actors will continue seeking platforms that offer less scrutiny, meaning Telegram’s efforts may only push the problem elsewhere.

SOCRadar’s Advanced Dark Web Monitoring: Your Safety Net Amid Changing Threat Landscapes

As the migration from Telegram accelerates, staying ahead of emerging threats becomes even more critical. SOCRadar’s Advanced Dark Web Monitoring offers a comprehensive solution by covering not just Telegram but also platforms like Discord, Signal, and the dark web. With our advanced monitoring tools, we provide real-time insights into illicit activities and potential data leaks, keeping your organization informed and prepared.

Our solution actively scans these digital spaces, enabling you to stay one step ahead of threat actors migrating to new platforms. In a world where privacy concerns are growing and cyber threats are evolving, having the right tools to monitor these environments is essential.

Leverage SOCRadar’s Advanced Dark Web Monitoring to navigate the shifting digital landscape and protect your organization from emerging cyber risks. Stay proactive and secure with SOCRadar.

For a broader analysis on Telegram’s evolving landscape and tfe migration of users to other platforms, you can check out our discussion on the topic in a previous blog post: Telegram’s Uncertain Future: Shift to New Platforms.

Published initially on SOCRadar, September 27, 2024
https://socradar.io/the-exodus-began-alternatives-for-telegram/