Telegram

Reported Context (2)

After a friend reached out for help, we discovered a thriving underground marketplace, organized on Telegram, focused on one thing: unlocking high-end phones—mostly iPhones. Underground Market Uses Smishing Kits to Unlock and Resell Stolen iPhones
Primary intrusion vectors included the abuse of leaked credentials obtained through encrypted messaging applications such as Telegram and Signal, marketplace forums, and initial access brokers. JSAC 2026 Day 2 Highlights Research on Phishing, Botnets and Ransomware

CVE (1)

Malware (3)

People (14)

Threat Actors (3)

MITRE ATT&CK (5)

Products (16)

Tools (2)

Industries (4)

Countries (12)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.