#8
BleepingComputer
general
May 11, 2026 at 09:03 UTC
TrickMo Android banker adopts TON blockchain for covert comms
By Bill Toulas
AI Summary
A new TrickMo Android banking malware variant targeting users across Europe has been updated with new commands and now uses The Open Network (TON) blockchain as its command-and-control communication channel, making traffic significantly harder to block or trace via traditional network controls. TrickMo has historically been used for overlay attacks, SMS interception, and credential theft against mobile banking users. The adoption of blockchain-based C2 represents an evasion evolution that challenges conventional network-based detection approaches.
Relevance score: 79.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →