Telegram Becomes the Nerve Center for Modern Hacktivist Operations

Telegram has solidified its position as the primary coordination hub for modern hacktivist operations, according to research analysing over 11,000 posts from more than 120 politically motivated threat actor groups. The study found that planning and mobilisation largely take place on mainstream platforms, with Telegram at the forefront as the command centre and X (formerly Twitter) in second place.

It reveals 2,063 unique hashtags circulating in 2025, with 1,484 appearing for the first time, used to amplify messages and coordinate actions. Hashtag activity shows that 58 per cent of hashtagged content reports completed attacks, with distributed denial-of-service attacks accounting for 61 per cent of claimed operations.

The research highlights a global reach, noting victims across Europe, the United States, Argentina, Indonesia, India, and other regions, and underscores that hacktivists prioritise visibility and broad reach over technical sophistication. 15 October 2025.