May 132026 New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots A new TrickMo Android banking trojan variant uses TON blockchain infrastructure for stealthy command-and-control communications.