Telegram-based malware scams have now surpassed traditional phishing attacks, according to Scam Sniffer . Between November 2024 to January 2025, incidents involving malicious Telegram groups skyrocketed by over 2,000%, while phishing-based attacks remained relatively stable. Advanced Tactics These new scams utilize a variety of methods including fake verification bots, fraudulent trading and airdrop groups, and exclusive alpha groups. Once users interact with these, attackers gain access to sensitive data like passwords, wallet files, clipboard activity, and browser data. This shift towards Telegram-based malware reflects a strategic move by cybercriminals, as malware offers broader access and makes financial losses harder to trace. To protect against these threats, Scam Sniffer advises users to avoid running unknown commands, installing unverified software, and using clipboard-based verification methods. Hardware wallets also provide added security. A Losing Battle Scam Sniffer has also reported an increase in scams where cybercriminals impersonate influencers and lure victims into fraudulent Telegram groups. These groups use bots like OfficiaISafeguardBot to inject harmful PowerShell code into clipboards, compromising sensitive data. The latest scams target legitimate project communities , urging users to run code for updates, bypassing traditional phishing tactics and relying on sophisticated social engineering. Security companies are also under pressure to come up with reliable mechanisms to protect everyone, albeit easier said than done.
