Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command-and-control (C2). The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting banking and cryptocurrency wallet users in France, Italy, and Austria. "TrickMo relies on a runtime-loaded APK (dex.module),
New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2026-05-12 12:50 UTC
- Importiert: 2026-05-20 14:13 UTC
- Quelle-ID:
thn_global - uid_hash:
0a95fb36642a44da6c888e95484bc023c2206dc82a7291e16457448f5deee7c0
Inhalt
| No data |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| The Hacker News | security_news | - | de | https://feeds.feedburner.com/TheHackersNews |