The recent arrest and indictment of Telegram CEO Pavel Durov in France has sparked debate and controversy over the implications it may have on cybercrime activities involving the platform. While some experts believe that Durov’s arrest may lead to minimal changes in the short term, others argue that cybercriminals will likely adapt quickly to any new circumstances and continue to leverage Telegram for their operations.
Durov was arrested on August 24 on charges related to criminals using Telegram for illicit activities such as child abuse and drug trafficking. Despite this, security researchers do not expect a significant impact on cybercrime activities on the platform. French authorities have also charged Durov, who is now a French citizen, with failing to cooperate with law enforcement requests for assistance in investigating criminal activity on Telegram.
While there is speculation that Durov’s arrest could prompt Telegram to crack down on malicious users, experts suggest that cybercriminals will simply enhance their operational security measures in response. The platform’s encryption, self-destructing messages, and large file transfer capabilities make it an attractive tool for cybercriminals looking to communicate securely and share stolen data.
Adam Gavish, CEO of DoControl, highlights the inherent security features of Telegram that make it appealing to cybercriminals. The platform’s end-to-end encryption, large group sizes, and ease of registration with virtual phone numbers contribute to its popularity among threat actors. Gavish also notes that the platform has become a hub for buying and selling stolen data, sharing hacking tools, and coordinating attacks, making it difficult for cybercriminals to migrate to alternative platforms.
However, concerns have been raised about potential backdoors that the Russian government may have to access messages on Telegram, which could prompt some cybercriminals to seek alternative communication channels. Analyst Rik Turner suggests that fears of Durov disclosing any backdoor access to Western intelligence agencies in exchange for leniency could drive some users away from the platform.
Overall, while Durov’s arrest may cause a small subset of cybercriminals to exercise caution when using Telegram for high-risk activities, experts believe that a mass exodus from the platform is unlikely unless concrete evidence of security compromise emerges. The future impact of Durov’s legal troubles on cybercrime activities on Telegram remains uncertain, but for now, it appears that the platform will continue to be a preferred choice for malicious actors seeking to conduct illicit operations.

