Breach404
Back to Insights
Cybersecurity2 min readMay 11, 2026

TrickMo Android banker adopts TON blockchain for covert comms

TrickMo, an Android banking malware now active across Europe, has evolved to use the TON blockchain for command-and-control communications, making it significantly harder for security teams to detect and block malicious commands through traditional networ

Could your website be vulnerable to attacks like this?

Run a free 10-point security scan on your site — headers, SSL, DNS, and more. Results in 15 seconds.

Test Your Site Now — It's Free