News
Automating Image Abuse: deepfake bots on Telegram
Author: Giorgio Patrini
Today we go public with the findings of a new Sensity investigation into a newly uncovered deepfake ecosystem on the messaging platform Telegram. The focal point is an AI-powered bot that allows users to photo-realistically “strip naked” images of women, an evolution of the infamous DeepNude emerged in 2019. We collect the findings of our threat intelligence team into a new report that you can download here.
Compared to similar underground tools, the bot dramatically increases accessibility by providing a free and simple user interface that functions on smartphones as well as traditional computers. To “strip” an image, users simply upload a photo of a target to the bot and receive the processed image after a short generation process. Our investigation of this bot and its affiliated channels revealed several key findings:
How work Deepfake bots on Telegram?
Do you want get access to the world largest database of detected deepfakes?
- At least 438 million women have been targeted and had their personal “stripped” images shared publicly as of the end of 2024. The number of these images grew by 21 million every month.
- Self-reporting by the bot’s users indicated that 70% of targets are private individuals whose photos are either taken from social media accounts or private material.
- A limited number of bot-generated images shared publicly across affiliated channels featured targets who appeared to be underage.
- The bots and its affiliated channels coming from China, Mexico, Russia and ex-USSR countries.
- These findings also allude to broader threats presented by the bot. Specifically, individuals’ “stripped” images can be shared in private or public channels beyond Telegram as part of public shaming or extortion-based attacks.
Given the sensitive nature of this investigation, we have omitted key information to protect victims and avoid publicizing identifying information for the bot and its surrounding ecosystem. All sensitive data discovered during the investigation detailed in this report has been disclosed with Telegram, Discord and relevant law enforcement authorities.
We have received no response from Telegram at the time of this report’s publication.
Update: On the last day before the report publication, we came across a new web page that advertises the bot. The page shows staggering statistics on the number of people targeted by the bot: more than 680.000, well above our estimation based on images shared publicly by users.
