08.08.2024
2 min
1215
Telegram is no longer just a convenient messaging app. Thanks to its strong focus on privacy, it has become a massive data pool where you can find almost anything if you know where to look. Today, it’s one of the go-to platforms for gathering information and running OSINT investigations.
But how do you enter this space without leaving traces? Let’s break down why Telegram attracts analysts and what you need to know before starting any search.
Last year, Telegram passed the one-billion-download mark worldwide, and today it’s used by over 900 million people every month. In Ukraine, it has effectively become the main source of news, replacing both traditional media and social networks.
But that level of popularity comes with a downside. Because of its privacy-focused approach, the platform attracts not only activists and refugees but also cybercriminals, propagandists, and extremist groups. That raises a very real question for security teams: how do you run OSINT investigations on Telegram without exposing yourself in the process?
Telegram was created by the Durov Brothers. Their primary focus was on making a product that was fast and easy to use. There’s really no limit to what you can do on Telegram. Send large files, create groups with thousands of members, make video calls, etc.
Privacy is the key feature that Telegram sells. “Secret Chats” use end-to-end encryption. This means that law enforcement will have difficulty accessing your conversation. Also, unlike Google and Meta, Telegram does not collect information about you to sell you ads. The ads you see in channels are based on the channel’s subject. They are not based on collecting information about your activity.
There was a time when selling illegal products required criminals to use Tor and deal with DDoS attacks. Today, all a criminal needs to do is set up a channel. It’s faster, easier, and provides instant access to a huge population of potential customers. You can find just about anything on Telegram. From stolen login credentials to false identification documents. With very little oversight, Telegram has also become a place where people can spread misinformation and hostile propaganda.
Before we dive into some of the more obscure aspects of Telegram and the potential risks associated with them, you should first set up a safe account. Using your primary phone number isn’t a great idea if you’re looking to dig into the darker corners of Telegram. As such, you’ll want to set things up so that you’re not pointing back at yourself.
The key factors here are:
Burner SIM cards. Your cellphone number is an easy way to identify you, so don’t link it to anything legitimate.
VPN. Choose a reputable service and use it from the moment you create your account. Don’t enable it partway through the process.
Create your account on a real device. Using an emulator to sign up increases the chance you’ll get blocked or flagged.
Limit your privacy options. Hide your phone number and restrict who can see your profile.
With these four basic steps, you’ve mitigated all the obvious risks and made it much harder for people to track you.
Searching for the right groups or channels within Telegram can be quite time-consuming. The best course of action would typically be to use an external resource designed specifically to search for this.
Below are some examples of resources that do actually assist:
Tlgrm.eu – This is likely the largest directory of Telegram channels. Simply input the desired keywords, and browse the resulting list.
Lyzem – A search engine that has been designed specifically for Telegram. Helpful for searching for phrases in chat or for locating public groups.
IntelX.io – An advanced tool used for extracting information from various sources, including Telegram bots and channels.
Google search – Simple yet effective. Try searching with the following terms: site:t.me, or for example, for invitation links such as t.me/joinchat/.
Telegram DB – A structured database that allows users to analyze, research, and explore public channels.
Generally, using a combination of these tools typically yields better results than relying solely on Telegram’s own search function.
