Telegram's Response to Apple's Brief Removal: Attacker Posted Pornography in Public Groups to Stage "Takedown Ransom"

BlockBeats News, August 4th. Telegram founder Pavel Durov posted on his personal channel, revealing that Apple had briefly removed Telegram from the App Store last night due to a user posting illegal pornographic content in a public group. The app was soon restored to the store within hours. The attacker had circumvented content moderation by editing old messages in active groups, inserting AI-modified illegal content that remained "invisible" to regular members, thus avoiding timely detection and reporting.

The attacker behind this incident is a "deplatforming extortionist" who automates accounts to distribute illegal content in public groups. They then report to platforms like Apple, attempting to extort group admins to pay a ransom. Otherwise, they threaten to exploit the platform's review process to have the community or app delisted. Pavel Durov emphasized that illegal content in public groups is not a systemic issue. The existing mechanisms for user reports, AI filtering, and content hash detection effectively handle violations. Attackers resort to hidden content and altering message history to make an impact.

Pavel Durov warned that this event exposed a new risk for user-generated content platforms, where malicious actors could misuse the app store review process to disrupt legitimate community operations. Attack methods are evolving, and other social platforms may face similar threats. He called on app developers and online communities to remain vigilant, enhance content moderation, and strengthen risk mitigation mechanisms.