AntiMalware•October 7, 2026•🇷🇺Translated from Russian

Russian Interior Ministry Accuses Telegram of Ignoring Drug Trafficking Requests

The Ministry of Internal Affairs of Russia has accused Telegram of completely ignoring appeals from Russian law enforcement agencies regarding the fight against illegal drug trafficking.

According to the ministry, the messenger, along with the darknet, has become one of the key platforms for involving teenagers in drug-related crimes. This statement was made by acting head of the Main Directorate for Drug Trafficking Control Kirill Smurov during a meeting of the presidium of the Public Council under the Ministry of Internal Affairs, as reported by TASS.

Smurov noted that Telegram administration does not react to requests and does not provide information, while the platform's founder Pavel Durov (listed by Rosfinmonitoring as a terrorist and extremist) avoids contact with Russian law enforcement. For comparison, the representative cited Yandex, which removes prohibited content either on its own or immediately upon police request.

Telegram has not demonstrated similar willingness to cooperate. Russian authorities have previously raised concerns about the messenger. According to Ministry of Internal Affairs data, around 153,000 crimes have been committed using Telegram since 2022. Roskomnadzor has also reported more than 150,000 demands to remove illegal content that went unanswered. The current statement focuses primarily on cooperation in combating narcotics.

Related articles

Habr•Policy & Regulation

Russian Websites Remain Dependent on Foreign SSL Certificates and Analytics Despite Sanctions

A Russian security researcher developed an open-source tool to scan websites for dependencies on foreign services that could be cut off abruptly. The scan of 50 major Russian sites including banks, retailers, telecoms, airlines, delivery services, online schools and government portals revealed that servers have largely been migrated domestically. However, critical components such as SSL certificates, analytics platforms and fonts remain tied to overseas providers. 43 out of 50 sites still use foreign SSL certificates, primarily from Belgian GlobalSign and American Let's Encrypt, while only four rely on the Russian NUC certificate from the Ministry of Digital Development. The study also highlights legal obligations under Roskomnadzor rules effective since March 2023 requiring prior notification for cross-border personal data transfers. Many sites continue using Google Analytics, Google Fonts and reCAPTCHA without realizing the compliance and resilience risks. The tool assigns letter grades from A to F based on the number of foreign dependencies detected.

Habr•Policy & Regulation

Digitizing Cyber Risks: How to Communicate Cyber Threats to Boards in the Language of Money

The article from Solar details a hybrid methodology for quantifying cyber risks by converting technical threats into financial metrics such as probability and expected losses. It explains that cyber risks represent a specialized form of operational risk characterized by rapid propagation, scalability across IT infrastructure, and heavy dependence on third-party vendors and cloud providers. The process involves four stages: asset and threat identification, incident and vulnerability analysis, translation into monetary values using formulas like ALE, and ongoing monitoring with updates. Qualitative expert assessments are combined with quantitative techniques including Monte Carlo simulations and statistical modeling when data is available. The resulting metrics support investment prioritization through ROSI calculations, integration of cyber risks into enterprise risk management frameworks, and clear communication with directors and investors using business language. Regulatory pressure and the direct impact of incidents on revenue, costs, and business continuity make this approach increasingly essential.

AntiMalware•Policy & Regulation

UK Regulator Ofcom Investigates Meta Over Instagram Instants Compliance With Online Safety Act

Britain's communications regulator Ofcom has opened an investigation into Meta to determine whether the company properly assessed risks before launching the Instagram Instants feature. The probe focuses on compliance with the Online Safety Act, specifically the potential for illegal content distribution and harms to minors. Instants, introduced in May 2026, allows users to exchange images that disappear after viewing. Under UK rules, platforms must update risk assessments before rolling out significant changes. Ofcom will first gather evidence and, if violations are found, issue a preliminary decision allowing Meta to respond. Penalties for non-compliance can reach 18 million pounds or 10 percent of global turnover, whichever is higher. Meta maintains it conducted risk analysis and implemented safeguards such as forwarding restrictions and teen account protections before launch.

AntiMalware•Policy & Regulation

Russia Plans Additional Security Checks for Gosuslugi Portal Access

Prime Minister Mikhail Mishustin has directed the Ministry of Digital Development to develop extra authentication measures for the Gosuslugi portal used by 120 million citizens. The new controls would apply both to initial logins and to account recovery procedures. Details on the exact checks and implementation timeline remain unspecified as the ministry must first propose a concrete mechanism. In parallel, officials are preparing a third package of anti-fraud measures that includes a unified consent platform inside Gosuslugi for managing personal data processing permissions. The platform would let users view which organizations access their data, revoke prior consents, and report violations. Russian police have separately warned that fraudsters are already exploiting the topic of account protection by sending messages that threaten blocking or data leaks and urge victims to call provided numbers.