Hello and welcome back to a new video in the
section 4 cyber threat intelligence and dark web in this
video. We will discuss about Telegram.
So let's start what is telegram telegram basically
as you all know telegram is a messaging
up. Let's encrypted and to end
encrypted cloud-based premium centralized instant
messaging app application that is
available worldwide the application also offers
optional and to end encrypted conversation. Sometimes
known as secret chat and video calling as
well boy file sharing and variety of
other capabilities.
And the most important thing is privacy.
So why telegram is being added to the
scores why telegram is important while there's
a huge link between Telegram and dark web.
Because telegram provides privacy and
end-to-end encryptions which makes a huge spot for
the hackers to discuss in an app that is
on internet surface and they don't think that
they will get monitored or surveyed for everything
they do.
So telegram have public groups and private groups
private groups. Meaning that we need a specific link to
enter this group. You need to know like
someone that can let you go to that group or also
that you have also the public group where you can
enter publicly and you can join the group
and check the information the good thing about telegram when
you join a public group, you can see all the chat
that happened before it's not like WhatsApp or any
kind of other messaging app. It's only when
you join you will see the new
thing that's happening after you join not
before so that's a cool feature in telegram.
So you can view like the data breach
leaks zero days leak credit cards smile what
hackers apts all these new and nice information
and it's really helpful
for us as a security researchers to know
what's happening on telegram or and this information that
is being shared on Telegram.
So let's do a quick demo about Telegram and let
you and let you see what kind of
things we can see and we need to check when
we need to do a threat intelligence since
telegram has a huge link also
with threat intelligence when we need to study data and
get some intelligence to based on that we
can do our response.
So, this is Telegram.
As you can see basically before coming to
here. You need to have an account you need to sign up either fake
number or original number. I really strongly
advice for fake number because if
you're entering a suspicious groups, you
don't need to reveal your real identity. So you need to make sure your
privacy you're not sharing your number. You're
not sharing your name. You're not sharing anything. So that's important.
Also note that this is this video
and all the videos I'm showing is for educational purposes.
Guys what you're gonna see now is actual things
happening. So I'm not gonna be
involved of anything you're gonna do for suspicious
activity. This is for only educational purposes
and to do research in the
cyber security and the first group that I want you
to see is X-Force one of
my favorites so X-Force. It's a telegram
group.
That it shows leaked credit cards.
So everyone shares credit cards
as you can see, this is a credit card.
This is the number this is the month and this is
the CVV code. Also. There is a board inside
this group as called
CC Checker. So this bot is
really amazing because it checks if
The credit card number is proved or not.
So basically do a quick payment to check.
So here is the status is declined that
response your card is not supported and they use the
Gateway stripe version 4.
And also it will give you details about it.
So this group it helped me a lot with my banking client
because sometimes you can find some data on
this group.
So as an example here, the credit
card here is a proof meaning this credit card is
working. It can be used on any side again those
things I'm showing is for educational purposes.
here you can see the
the people is actually chatting about it. So
here it's change. It's that here
is sharing a credit card
information here is also sharing credit card
information commands how it's working.
and lots of cool stuff
also what you can do in Telegram and
subscribe to
channels that give you insights and intelligence
data like this channel.
Let's call cyber threat intelligence. It shares
daily data about stuff
what's happening? Like here we have Cardinal objects
extend my attack based detection poster management.
It serves everything what's happening,
like here. We have tiktok that it could be banned.
Everything every new attack every new thing that these things
help us when we do intelligence study.
Another group I want to show is leaks how the leaks
are being delivered in telegram. So
here one of the famous groups, it's
called it Army a Russian league.org so
chairs leaks and
That you can download also here. We have Russian Facebook LinkedIn
Russia. I don't know what this
means. But all of these are
leaks that it can be downloaded. Here. We have he index.
And other stuff also.
A part of leaks 2 there's also things
related to credit card. So here also there's
a
group that shows also credit cards leaks
and it shows you exposed bins that
can be used for suspicious stuff
on websites.
So yes, so here they share methods
about how to bypass payments
and share and they do like the card link
attack method. So here they share like the
bins that could work on Twitch Disney Plus on YouTube
and other stuff also here
we have convert.
So yes radiant Services is a
group is also called one that shares a threat
insights like the Cyber threat intelligence. That's also
good to do the study and have data that
you can use for the security research you're
doing
also if you remember
in the previous
videos we did there. Is this the deep
dark city. I
That it gives you information for the awesome
and many stuff for us
to have resources and also for dark web.
So if you remember there's a part called Telegram.
If you go to that page, it will show you
lots of groups that shares stuff.
Sometimes it's online. Sometimes it's offline, but
let's take an example for
Data leak, like here we have it's online.
It's called base leaks.
So you can like open the link and
you can check what's the
group is sharing. So here we have.
leaks for black candid.io
source code leak here you have
A stockal tool leak it's a basically this
is a game.
and
You have Japan TC users telegram
users for telegram Brazil credit
scores steam ID Dot.
R so basically steam is for the steam
client for games. So they're sharing
ID name and IP.
Here we have something related to
UK shopping website data breach.
WhatsApp
and lots of stuff
this website the dark city. I for telegram
on GitHub, it shares a lot of stuff that you
can use and let's you
identify for potential data breach for
your clients or if it's a banking client.
You can find credit card numbers that's being
leaks and more and more.
So mostly they are related to data leaks
and DDOS offensive
stuff.
selling accounts industrial spy, let's
see that
let's open the link.
So here we can see what's happening on the
On this group, obviously something
related so suspicious stuff.
Also, there's some attachment to download to check.
Okay, so that's too much information.
Okay, next. Let's see hidden links.
Okay something that I want to share also that
make sure your
Connected to VPN here. I'm
using proton VPN. It's free. You can download
it and connect to it.
Because entering such groups or
downloading such data, it will put
you sometimes on the risk. So that's why be on
a VPN.
So here we have some hidden links leaks
also.
This is on dark web.
So you see there's a huge link between Telegram and
dark web. So this is dark web.
links
So now, you know how to use Telegram
and how to get data. I hope
this information it will help you.
and your threat intelligence research and
I will see you in the next section where we will
talk about the dark web automation.