TonRAT is a Node.js-based implant used in a phishing campaign targeting hotels. It resolves C2 domains via the TON blockchain API and communicates over encrypted WebSocket channels on non-standard ports.
TonRAT is a Node.js-based implant used in a phishing campaign targeting hotels. It resolves C2 domains via the TON blockchain API and communicates over encrypted WebSocket channels on non-standard ports.