As cited
Copy frozen at (site build).
threat intel
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
Phishing emails impersonating Booking.com targeted Japanese hotels in May 2026, delivering a remote access trojan (RAT) called TONResolver that leverages the TON blockchain for command and control. The campaign employed social engineering against hospitality industry staff to gain initial access.
Why it matters: Japanese hotel operators and their booking partners face credential theft and system compromise; security teams should train staff on phishing tactics targeting the hospitality sector and monitor for TON blockchain-based C2 communications.
- Source published
- First seen by Cybersecurity Tracker