Skip to content
The Nexus
DossierENTITY

ThreatFabric

Coverage of ThreatFabric in the Nexus archive.

Earliest in view: May 12 · 12:50 UTCMost recent: May 12 · 12:50 UTC
Co-mentioned in this coverage
TrickMotopic1The Open Network (TON)organization1Franceplace1Italyplace1Austriaplace1
Recent coverage
  • SECURITYMay 12 · 12:50 UTCTHE HACKER NEWS
    New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots

    Cybersecurity researchers have discovered a new variant of the TrickMo Android banking trojan that uses The Open Network for command-and-control and targets users in France, Italy, and Austria. The new variant was observed between January and February 2026 and relies on a runtime-loaded APK. It actively targets banking and cryptocurrency wallet users.