InfoSecBulletin Cybersecurity for mankind
If you’re looking to buy or sell phishing kits, looking to learn more about how phishing works, or just looking to enter the fray on a voluntary basis, your best bet is to go exploring on Telegram groups.
This is according to a new report from cybersecurity researchers Kaspersky, which claims the popular encrypted instant messaging platform has become quite the breeding ground for this particular cohort of cybercriminals.
CVE-2025-2492
ASUS warns of critical auth bypass flaw in routers
16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia
Patch now! Critical Erlang/OTP SSH Vuln Allows UCE
CISA warns of increasing risk tied to Oracle legacy Cloud leak
CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App
Apple released emergency security updates for 2 zero-day vulns
Oracle Released Patched for 378 flaws for April 2025
CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild
Bengaluru firm got ransomware attack, Hacker demanded $70,000
MITRE warns: U.S. Govt. Funding for MITRE’s CVE Ends Today
The researchers say that right at this moment, one can find Telegram groups where hackers are offering free phishing kits paired with pre-packaged tools that allow new entrants to create phishing pages and pose as popular brands. There are also groups where free phishing kit contents are being shared, as well as automated phishing page creation. Also, a cybercrime aficionado could head over to Telegram and find premium pages with customizable interfaces, anti-bot systems, geoblocking, URL encryption, and social engineering elements. However, for these premium services, one can expect to pay between $10 and $300.
Phishing is currently one of the most popular cybercriminal activities out there, second only to Business Email Compromise (which in itself is a form of phishing) and ransomware.
A recent Cofense report stated that there has been a 569% increase in phishing attacks in 2022, compared to the year before. Reports related to credential phishing were up 478% last year, as well.
