Hunting Cyber Threat Intelligence on Telegram
summary
TeleHUNT automated framework systematically discovers Telegram cybercrime communities using 28 discovery configurations (links, handles, forwards; Open Web vs Dark Web seeds) and runs a 15‑day collection that gathers 43,000 advertisements tied to 3,468 distinct communities across six market segments. Link‑based crawling reaches the widest set (≈2,000 communities) but yields ~50–70% noise, while forward/handle strategies give ~99% precision and saturate early; invite links remain the primary gateway to private and vetted groups.
AI-written summary · about
chapters (7)
- 0:00Threat hunting on Telegram
- 4:43Monitor Telegram for threats
- 9:40TeleHunt for community discovery
- 16:03Testing TeleHunt with data
- 21:00Analyzing Telegram communities
- 25:13Knowledge graphs from Telegram data
- 26:59Q&A
related talks
34mFormulating An Intelligence-Driven Threat Hunting Methodology
40mHunt and Gather: Developing Effective Threat Hunting Techniques
31mThreat Hunting — Demystified
44mHUNT: Data Driven Web Hacking & Manual Testing
36mSo You Want to Build a Threat Hunt Program
36mCyber Crime and Attacks on the Dark Side of the Web
30mThe Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain
40mStrengthening Cyber Resiliency in a Time of Geopolitical Crises...