New TrickMo Variant: Device Take Over malware targeting Banking, Fintech, Wallet & Auth apps

Reported 11 May 2026 by otx · Severity: medium

A new variant of the TrickMo Android banking trojan was identified between January and February 2026, representing a substantial platform redesign rather than new capabilities. The malware has migrated its command-and-control infrastructure entirely onto The Open Network (TON) us