Cofense

Security researchers at Cofense have analysed two malware campaigns, EtherRAT and TONResolver, targeting the accommodation industry. Attackers pose as guests sending fake complaints and reviews to trick hotel staff into installing remote access tools, then abuse blockchain networks like Ethereum and TON to hide their command-and-control communications and evade detection.