TONResolver: tonapi.io DNS/Network Query from Non-Browser Process

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects network activity and DNS resolutions related to the tonapi.io domain initiated by unexpected processes. This pattern is indicative of the TONResolver RAT, which abuses TON smart contracts as a mechanism for command and control (C2).