← Back to Feed

TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry

June 29, 2026 · Trend Micro · Severity: HIGH

Trend Micro's TrendAI Research analyzes a wave of phishing emails observed in May 2026 targeting Japanese accommodation facilities through Booking.com-themed lures. The attacks deliver TONResolver RAT, which abuses the TON blockchain for C2 communications. The campaign demonstrates industry-specific targeting combined with blockchain-abusing malware.

Key Takeaways

  • TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese.
  • TrendAI™ Research examines a wave of phishing emails observed in May 2026 that targeted Japanese accommodation facilities using Booking.com, detailing the victims, attack techniques used, and characteristics of the malware involved.
☕ Buy a Coffee