Channel
@threat_report
On this record: Topic · Growth · Engagement · Reactions · Posts · Cite this entry
23subscribers
+4 since we began measuring on 7 August 2026
Risers and fallers across the register · movement among entries of Under 1,000.
| Telegram ID | -1003713965952 |
|---|---|
| Type | Channel |
| Username | @threat_report |
| Created | Between 1 February 2026 and 30 July 2026 — estimated from Telegram’s id allocation, not measured. How this range is calculated. |
| First recorded | 11 August 2026 |
| Last confirmed live | 3 October 2026 |
| Measurements held | 4 |
| Confirmed unchanged | 1 time, most recently 3 October 2026 |
| On Telegram | t.me/threat_report |
Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 1 October 2026 and assigned it the closest of 31 fixed categories, at 98% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and why it has no browse page of its own yet.
| Measured (UTC) | Subscribers | Change |
|---|---|---|
| 3 Oct 2026, 23:37 | 23 | +2 |
| 18 Sept 2026, 04:21 | 21 | +2 |
| 11 Aug 2026, 17:46 | 19 | no change |
| 7 Aug 2026, 19:43 | 19 | first reading |
20 posts held, back to 30 July 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.
Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 10 August 2026. An engagement rate over an empty window would be a number about nothing.
9 reactions across 9 posts, in 1 kind.
| Reaction | Count | Share | Share, drawn |
|---|---|---|---|
| ❤ | 9 | 100.0% |
No sentiment is inferred, and none should be read in. This table is ordered by count and by nothing else. Emoji do not carry stable meaning across languages or communities — 🙏 is thanks in one channel and mourning in another — so we publish which ones were pressed and how often, and pass no judgement on what an audience meant by them.
Precision. Telegram publishes reaction counts per emoji and short-forms each one — 4.34K, 1.2M — so any single kind at or above 1,000 reaches us at three significant figures, and only counts below 1,000 are exact. The shares above are ratios of those figures and carry the same error. This is also why the total here can differ slightly from a reaction total printed elsewhere on the page: both are sums of the same rounded parts, taken over samples with different edges.
Coverage. Reactions were read on 9 of the 20 sampled posts in this sample. Summed by Telegram’s own count on each post — not by adding up the per-emoji breakdown above — those same posts carry 9 reactions in total: the kind of figure the paragraph above means by “a reaction total printed elsewhere on the page”.
Measured over the 20 most recent posts we hold, published 30 July 2026 to 10 August 2026, using the newest reading held for each. Telegram Stars are excluded: they are a payment, not a reaction, and they have their own section.
Coinsbuy posts $100K bounty after $7.9M crypto theft Coinsbuy says unauthorized withdrawals drained more than $7.9 million from its Ethereum and TRON wallets and offers $100,000 for information that identifies the attackers, plus an asset-recovery bonus. The company restored user deposits and withdrawals and claims it covered affected funds from reserves. It has not shared how the breach happened. Last sentence take…
Alcon | Data Breach Actor: ShinyHunters Records: ~218k Data: Email addresses, names, phone numbers, physical addresses. Date: August 2026 @Threat_Report
New CSS Attacks Target Major Webmail Services Researchers have discovered CSS-based attacks that can break out of email content boundaries and interfere with webmail interfaces. The attacks reportedly work against Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, potentially enabling password and token theft, account takeovers, and abuse of trusted account actions. @Threat_Report
📊 Crypto Market Overview @Threat_Report
Three Missouri Men Charged in Cryptocurrency Robbery Scheme Three men from Missouri face criminal charges tied to a cryptocurrency robbery scheme. Prosecutors allege they carried out a planned effort to steal crypto assets and used the scheme to profit. The case highlights how criminals increasingly target digital money in real-world thefts. Join: @Threat_Report to keep up to date with all cybercrime news!
Trezor Wallet Victim Claims Life Savings Stolen After Sponsored Google Phishing Ad A crypto user says a sponsored Google result for “Trezor wallet” sent him to a fake Trezor page hosted on Google Sites that requested wallet recovery details. Trezor reports a rise in phishing ads showing up in sponsored search, a tactic previously tied to major crypto losses. The incident highlights how search ads can quickly become …
US Attorney Seeks to Seize Crypto Tied to Online Fraud Scheme The US Attorney’s Office filed a civil forfeiture case to recover cryptocurrency used in an online fraud scheme. The action targets digital assets connected to the alleged criminal conduct and could lead to their forfeiture. Join: @Threat_Report to keep up to date with all cybercrime news!
Canadian Man Pleads Guilty in Major Cloud Data Extortion Scheme A 26-year-old man from Kitchener, Ontario, Connor Riley Moucka, pleaded guilty to computer fraud and conspiracy for his role in a cloud data extortion campaign targeting more than 165 organizations. Authorities say the group used stolen credentials to access cloud-hosted data and also stole call and text records belonging to over 100 million AT&T custo…
Inter-Con Security | Data Breach Actor: ShinyHunters Records: ~276k Data: Names, emails, phone numbers, physical addresses, job titles. Date: June 2026 @Threat_Report
OpenAI disrupts Cambodia based scam network using ChatGPT accounts OpenAI says it banned a coordinated set of ChatGPT accounts tied to a Cambodia operation based in Poipet. The group allegedly used the chatbot to run investment, romance, gambling, and law-enforcement impersonation scams. Disrupting these coordinated accounts cuts off a key tool fraudsters use to scale outreach. Join: @Threat_Report to keep up to da…
Coldcard exploit attacker holds 1,159 BTC as mixing begins The main Coldcard wallet theft linked to an RNG flaw still sits untouched: 1,159 BTC across seven addresses. On-chain investigators also see a different actor sending 64 BTC toward a mixer, starting with about 10 BTC. Roughly 600 flagged addresses have been shared with law enforcement, exchanges, and analytics firms. Most stolen funds remain unmoved while sm…
FBI Seizes Billgang, Antistock & Hoodpay Infrastructure Billgang.com, Antistock.io, and Hoodpay.io have reportedly been seized by the FBI after many users initially believed the platforms had exit scammed. DNS records now resolve to the FBI, confirming the infrastructure takeover. Some users claim they've lost significant balances, with reports of losses reaching $150K. The seizure is another reminder that criminal …
❤1
Showing the 12 most recent of 20 posts we hold for @threat_report. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.
A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 3 October 2026 — this entry's latest reading, not the date you are reading this.
“Threat Report” (@threat_report), 23 subscribers as measured 3 October 2026. Telegram Register, tgregister.com/channel/threat_report.
Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.