TrickMo Android Trojan Migrates to TON Blockchain for C2, Gains Network Pivot Capabilities (thehackernews.com)

• TrickMo now uses TON blockchain for C2, resistant to takedown
• Infected devices can pivot to attack internal network resources
• Represents an evolution in Android malware sophistication

"The TrickMo banking trojan has migrated its C2 infrastructure to the TON blockchain to evade takedowns, and transforms infected devices into network pivots for internal reconnaissance and lateral movement."