OTX Threat: RAT Abuses TON Blockchain to Target Japan's Hotel Industry

A sophisticated phishing campaign observed in May 2026 targets Japanese accommodation facilities partnering with Booking.com. Attackers impersonate guest complaints and review requests through emails, tricking hotel staff into downloading malicious ZIP files containing shortcut links disguised as photos. The malware, TONResolver, employs The Open Network blockchain platform as a dead drop resolver CVEs: CVE-2026-33017 Sectors: Hospitality