The attack sounds bureaucratic on paper, but it's dead simple to execute: find an active group chat, quietly edit an old message buried deep in the thread, replace it with AI-doctored illegal content — somewhere group members would never scroll back to see, so no real human ever flags it. Then, run a batch of automated accounts to mass-report that same message you just planted, sending a clear signal to Apple: there's illegal content here, take action. Telegram founder Pavel Durov called this whole playbook a "takedown extortion" scheme, in an X post explaining why the app briefly vanished from the App Store this week.
The sharpest part of Durov's claim is that Apple pulled Telegram before ever reaching out to Telegram itself. In other words, the entire decision was made unilaterally by Apple based on report signals, with Telegram completely shut out of the process — the app was already gone by the time they even found out. Durov's theory is that the people behind this are running an extortion play: if the platform doesn't pay up to make it stop, they'll keep manufacturing the same report signals to force takedown after takedown.
He framed this as a "potential systemic risk," deliberately pointing out that the target isn't just Telegram — it's any app hosting user-generated content. Read between the lines, and he's really questioning the logic behind Apple's review process itself: once automated reports hit some threshold, does the App Store pull an app first, without human verification and without notifying the developer?
Who's responsible for user-generated content is a question that's dogged social platforms for years, and this isn't the first time Telegram and Durov have landed at the center of that fight. What's different now is that AI has made "fabricating something that looks illegal" faster and easier than ever — and if Apple's review process leans mainly on report volume instead of actual content verification, that hands this kind of bad actor a ready-made lever to pull. Durov's post didn't offer further technical details or a timeline for what happens next, and Apple has yet to comment publicly.
