- Confidential and Proprietary -
Luminar Annual Threat Landscape Report Page 25
activities on Telegram, and a decrease on the Dark Web. As discussed above, there are many reasons
why threat actors depart from Dark Web sources. Many of whom, it seems, find their new home in
Telegram. We expect this trend to further increase.
This is even more evident when focusing on specific activities. Looking into the credit card trade (Graph
4), we can see a decrease in activity on the Dark Web, even though we do not see a stable increase of
such activity in Telegram. In the case of leaked data, probably the most popular activity on the Dark
Web, we do see a stable increase in Telegram, and a huge gap developing from the Dark Web.
The data also shows (Graph 3) that this happens across all the different underground communities,
with some like the Chinese adopting it faster than others. Despite those differences between various
user communities in different languages, one thing is clear – across all the main languages that
comprised the Dark Web communities, we witness a migration to Telegram.