Telegram channels promoting your farm.
Farm toolkits are promoted on Telegram: channels that post new drops, link to the repos and sell access to farmed accounts and keys. Esuba watches the channels that mention your product, reports them to Telegram, and follows their links to the rest of the operation.
What we watch for
- Channels and groups posting a farm for your signup flow
- Posts linking to the toolkit's repos or servers, which tell us where to report next
- Offers of farmed accounts, credits or API keys for your service
In Case 001, one channel promoted the client's farm in one post and linked the operator's git server in three more. Those links led straight to infrastructure we then reported.
How we report to Telegram
Telegram takes reports in the app and by email to its abuse team. We report the channel and the specific posts, with archived copies.
Replies are rare. In Case 001 the channel was still live with no reply 12 days after our report. So we treat Telegram as one route among several: the channel points to repos, servers and domains whose providers often act faster.
Following the links
A Telegram post is often the quickest way to the rest of an operation. Every repo, server and domain it links to goes into the same case and is reported to whoever runs it. See farm toolkit takedowns.
Questions
Will Telegram remove the channel?
Sometimes, but it's often slow to respond. The takedowns that matter most usually happen elsewhere: on GitHub, at the host and at the registrar.
Do you join private groups?
No. We read public channels and posts only.