← Back to Feed
TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry
June 29, 2026 · Trend Micro · Severity: HIGH
Trend Micro's TrendAI Research analyzes a wave of phishing emails observed in May 2026 targeting Japanese accommodation facilities through Booking.com-themed lures. The attacks deliver TONResolver RAT, which abuses the TON blockchain for C2 communications. The campaign demonstrates industry-specific targeting combined with blockchain-abusing malware.
Key Takeaways
- TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry — In this blog entry, TrendAI™ Research examines a wave of phishing emails observed in May 2026...
- High-severity alert: organizations should assess their exposure and apply mitigations promptly.
- Phishing awareness training and email filtering remain essential first-line defenses.
- AI and LLM usage introduces new attack surfaces, including hallucinated domains and prompt injection risks.
- Android RATs distributed through fake apps pose significant mobile security risks requiring app-store vigilance.