[Xploitd]

How Telegram can be used to de-anonymize you

 

TLDR: Just like signal, you need to put your phone number to sign up on Telegram, that makes it unsuitable for Anonymous use. And because anonymity isn't there, deniability is not possible either.

IntroductionYou might see people offering you to contact them on Telegram for illegal services on DN platforms like Pitch/Dread.
Here's some examples:


http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/1.png


http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/2.png


In most cases, they either want to scam you, or want to put you behind bars.
Why shouldn't I use Telegram?Telegram has multiple intentional flaws, that make it not suitable for Private or Anonymous use.
Telegram shares your data with Law Enforcement

 

If Telegram receives a valid order from the relevant judicial authorities that confirms you're a suspect in a case involving criminal activities that violate the Telegram Terms of Service, we will perform a legal analysis of the request and may disclose your IP address and phone number to the relevant authorities. If any data is shared, we will include such occurrences in a quarterly transparency report published at: https://t.me/transparency.

source: Telegram's Privacy Policy

Note: The transparency report is locked to your registration country and placed behind a sign-up wall, you can view it without signing up here.

http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/3.png


After the arrest of Pavel Durov (Telegram's CEO) in August 2024, Telegram had a spike in amount of data handed over to LE's of various countries.
For example, in 2024, Telegram had complied to 14641 requests from Indian government, handing over information of 23535 users.






http://opbible7nans45sg33cbyeiwqmlp5fu7l...nymity.png


Phone number verification
Just like Signal, to register on Telegram, you have to provide your phone number and verify it through SMS.
Even if you bought a fake number, you'd still have to register on it with a mobile client, since registration is inaccessible for Desktop clients.
After you create you account, anyone who knows your phone number can see your Telegram profile.



No E2EE by default
http://opbible7nans45sg33cbyeiwqmlp5fu7l...rivacy.png

By default, all your messages are stored in plaintext on Telegram's data centers. Telegram can access them at any time and share them with Law Enforcement.
Though it does feature E2EE in Secret Chats, it is only accessible on a mobile device or a Mac, which makes it not suitable for Private use.
People getting prosecuted by using TelegramHere are examples of people getting prosecuted after using Telegram for sensitive purposes:


Case 1:http://opbible7nans45sg33cbyeiwqmlp5fu7lklu6jd6f3mivrjeqadco5yd.onion//opsec/telegramnoanonymity/case1.png

source
Hacker on Dread from France registered a Telegram account to get more customers.
Consequences: Arrest with Cybercrime charges, released due to lack of evidence.


http://opbible7nans45sg33cbyeiwqmlp5fu7l...case2.avif

Case 2:
Jehanzeb Amar, 29, from London and Salahydin Warsame, 29, from Birmingham, used a Telegram bot to distribute large amounts of cocaine.
Consequences: Both imprisoned for 13 and 10 years respectively.
Case 3:Benjamin Hunt, 26, of Boston, used Telegram to advertise and sell a total of 2310 pills containing Fentanyl, several firearms and firearm parts for Bitcoin.
Consequences: 20 years in prison and a fine of $1 million.

Hidden Content

You must register or login to view this content.

[virusecurity]

[font][font]thanks Telegramdan qanday qilib sizni anonimlashtirish mumkin[/font][/font]

 

TLDR: Just like signal, you need to put your phone number to sign up on Telegram, that makes it unsuitable for Anonymous use. And because anonymity isn't there, deniability is not possible either.

[font][font]Kirish Sizga Pitch/Dread kabi DN platformalaridagi noqonuniy xizmatlar uchun Telegramda ular bilan bog'lanishni taklif qilayotgan odamlarni ko'rishingiz mumkin. [/font][/font]
[font][font]Mana ba'zi misollar: [/font][/font]


http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/1.png


http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/2.png


[font][font]Ko'pgina hollarda, ular sizni aldashni yoki panjara ortiga tashlashni xohlashadi. [/font][/font]
[font][font]Nima uchun men Telegramdan foydalanmasligim kerak?[/font][/font][font][font] Telegramda bir nechta qasddan kamchiliklar mavjud, bu uni shaxsiy yoki anonim foydalanish uchun mos emas qiladi. [/font][/font]
[font][font]Telegram sizning ma'lumotlaringizni huquqni muhofaza qilish organlari bilan baham ko'radi.[/font][/font]

 

[font][font]Agar Telegram tegishli sud organlaridan sizning Telegram xizmat ko'rsatish shartlarini buzadigan jinoiy faoliyat bilan bog'liq ishda gumon qilinayotganingizni tasdiqlovchi qonuniy buyruqni olsa, biz so'rovni huquqiy tahlil qilamiz va sizning IP-manzilingiz va telefon raqamingizni tegishli organlarga oshkor qilishimiz mumkin. Agar biron bir ma'lumot almashilsa, biz bunday holatlarni https://t.me/transparency manzilida chop etiladigan har choraklik shaffoflik hisobotiga kiritamiz.[/font][/font]

[font][font]Manba: [/font][/font][font][font]Telegram Maxfiylik siyosati[/font][/font]

[font][font]Eslatma: Shaffoflik haqidagi hisobot sizning ro'yxatdan o'tgan mamlakatingizga bog'langan va ro'yxatdan o'tish devori orqasida joylashgan, siz uni [/font][/font][font][font]bu yerda[/font][/font][font][font] ro'yxatdan o'tmasdan ko'rishingiz mumkin . [/font][/font]

http://opbible7nans45sg33cbyeiwqmlp5fu7l...mity/3.png


[font][font]2024-yil avgust oyida Pavel Durov (Telegram bosh direktori) hibsga olinganidan so'ng, Telegram turli mamlakatlarning huquqni muhofaza qilish organlariga uzatilgan ma'lumotlar miqdorida keskin o'sish kuzatildi. [/font][/font]
[font][font]Masalan, 2024-yilda Telegram Hindiston hukumatining 14641 ta so'rovini bajarib, 23535 foydalanuvchining ma'lumotlarini topshirgan. [/font][/font]






http://opbible7nans45sg33cbyeiwqmlp5fu7l...nymity.png


[font][font]Telefon raqamini tekshirish [/font][/font]
[font][font]Xuddi [/font][/font][font][font]Signal[/font][/font][font][font] singari , Telegramda ro'yxatdan o'tish uchun [/font][/font][font][font]siz telefon raqamingizni taqdim etishingiz va uni SMS orqali tasdiqlashingiz kerak[/font][/font][font][font] . [/font][/font]
[font][font]Soxta raqam sotib olgan bo'lsangiz ham, mobil mijozda ro'yxatdan o'tishingiz kerak bo'ladi, chunki ro'yxatdan o'tish ish stoli mijozlari uchun mavjud emas. [/font][/font]
[font][font]Hisobingizni yaratganingizdan so'ng, telefon raqamingizni biladigan har bir kishi sizning Telegram profilingizni ko'rishi mumkin. [/font][/font]



[font][font]Sukut bo'yicha E2EE yo'q [/font][/font]
http://opbible7nans45sg33cbyeiwqmlp5fu7l...rivacy.png

[font][font]Sukut bo'yicha, [/font][/font][font][font]barcha xabarlaringiz Telegram ma'lumotlar markazlarida ochiq matnda saqlanadi[/font][/font][font][font] . Telegram ularga istalgan vaqtda kirishi va ularni huquqni muhofaza qilish organlari bilan baham ko'rishi mumkin. [/font][/font]
[font][font]Maxfiy suhbatlarda E2EE funksiyasini taqdim etsa-da, unga faqat mobil qurilmada yoki Macda kirish mumkin, bu esa uni shaxsiy foydalanish uchun yaroqsiz qiladi. [/font][/font]
[font][font]Telegramdan foydalanganlik uchun javobgarlikka tortilgan odamlar[/font][/font][font][font] Telegramdan maxfiy maqsadlarda foydalanganlik uchun javobgarlikka tortilgan odamlarga misollar: [/font][/font]


[font][font]1-holat: [/font][/font]http://opbible7nans45sg33cbyeiwqmlp5fu7lklu6jd6f3mivrjeqadco5yd.onion//opsec/telegramnoanonymity/case1.png

[font][font]manba[/font][/font]
[font][font]Fransiyalik Dread xakeri ko'proq mijozlarni jalb qilish uchun Telegram akkauntini ro'yxatdan o'tkazdi. [/font][/font]
[font][font]Oqibatlar: Kiberjinoyatchilik ayblovlari bilan hibsga olindi, dalillar yetishmasligi sababli ozod qilindi. [/font][/font]


http://opbible7nans45sg33cbyeiwqmlp5fu7l...case2.avif

[font][font]2-holat: [/font][/font]
[font][font]Londonlik 29 yoshli Jehanzeb Amar va Birmingemlik 29 yoshli Salahydin Warsame katta miqdordagi kokainni tarqatish uchun Telegram botidan foydalangan. [/font][/font]
[font][font]Oqibatlar: Ikkalasi ham mos ravishda 13 va 10 yilga ozodlikdan mahrum qilindi. [/font][/font]
[font][font]3-holat: Bostonlik 26 yoshli Benjamin Hunt Telegramdan foydalanib, jami 2310 ta Fentanil, bir nechta o'qotar qurollar va Bitcoin uchun o'qotar qurol qismlarini reklama qildi va sotdi. [/font][/font]
[font][font]Oqibatlar: 20 yil qamoq jazosi va 1 million dollar jarima.[/font][/font]