Cybercrime Shifts to Telegram: 61% Increase in Discussions

• •Cybercrime discussions on Telegram rose to 45% in early 2026, up from 28% in 2025.
• •Major dark web forum takedowns have driven cybercriminals to seek alternative platforms.
• •Telegram's accessibility lowers barriers for inexperienced cybercriminals, potentially increasing attack volume.

Recent research by NordLayer Intelligence indicates a significant shift in cybercrime discussions from the dark web to Telegram, with discussions rising from 28% in 2025 to 45% in early 2026. This 61% increase reflects a changing landscape for cybercriminals as law enforcement intensifies pressure on dark web forums, leading to major takedowns like the LeakBase forum. Telegram's accessibility allows inexperienced actors to engage without the barriers typical of dark web forums, potentially increasing the volume of cybercrime but not necessarily its sophistication. The findings suggest that organizations may face a larger number of lower-skilled attackers utilizing readily available tools and services. The trend raises concerns about the evolving threat landscape as traditional barriers to entry for cybercrime diminish.