thehackernews.com·May 12, 2026
A new variant of the TrickMo Android banking trojan, utilizing The Open Network for command-and-control, has been identified by cybersecurity researchers, targeting banking and cryptocurrency wallet users in France, Italy, and Austria from January to February 2026.
The key insight for you is that the new variant of the TrickMo Android banking trojan is leveraging The Open Network (TON) for command-and-control, highlighting the evolving tactics cybercriminals are using to enhance their operational security and target banking and cryptocurrency users in specific regions. This underscores the importance of monitoring emerging C2 infrastructures like TON in threat intelligence efforts to anticipate and mitigate such sophisticated threats.