TeleSint

Actor

Threat actor profiles from Telegram. Filters: name, nation_state(kp|ru|cn|ir), motivation(financial|espionage|hacktivism), ttp, severity, limit. Returns items[] with actor{}, ttps[], target{sectors,countries}.

TeleSint

Asn

ASN threat intel from Telegram CTI channels. Pass ?asn=AS215540. Returns C2/phishing-kit associations, threat actor mentions, bulletproof hosting flag, blocking recommendation with WAF hint, and record IDs for pivoting into /c2 or /ioc.

TeleSint

Breach intelligence

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Command-and-control infrastructure intelligence

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Dark-web threat intelligence

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Ioc

IOC feed from Telegram CTI channels. Filters: type(ip|domain|url|hash|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence, severity, tlp, tags[].

TeleSint

Malware intelligence

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Pre-attack intent signals

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Ransomware

Ransomware group activity from Telegram: victim posts, leak site announcements, extortion demands. Filters: severity, min_confidence, since, tag(lockbit|blackcat|cl0p|ransomhub), sector, country, limit, offset.

TeleSint

Search

Cross-category pivot across all TeleSint intel. Use ?q= for broad keyword or combine filters: category, severity, sector, country, tag, ttp, name, organization, min_confidence, since. Returns items[] across any category.

TeleSint

Threat-intelligence artifacts

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Threat-intelligence feed

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Threat-intelligence sources

Threat intelligence API that extracts indicators of compromise, C2 infrastructure, threat actor profiles, breach disclosures and CVE signals from public Telegram security channels, returned as structured JSON with MITRE ATT&CK tags and confidence scores.

TeleSint

Vulnerability

CVE and exploitation-in-the-wild signals from Telegram CTI channels. Filters: severity, min_confidence, since, tag(cve|exploit|poc|patch), ttp, type(cve), limit, offset. Returns CVE IDs, affected products, exploit status.

TeleSint