ThreatFabric Analysis: TrickMo C Banking Trojan Adopts TON Blockchain for Decentralized C2 (bleepingcomputer.com)

• TrickMo C uses TON blockchain for decentralized C2
• Smart contracts replace central servers
• Significantly complicates network-based takedowns
• Focuses on banking apps and bypassing security

"ThreatFabric has discovered a new variant of the TrickMo banking trojan, 'TrickMo C', that uses the TON blockchain network for decentralized command-and-control communication. This significantly complicates traditional network-based takedowns, as the C2 infrastructure is no longer centralized on servers but distributed via smart contracts."