threat-intel
WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud
High
Summary
A new Android malware family, WindRelay, is being used in conjunction with a remote access trojan (RAT) called SpyNote to facilitate contactless payment fraud. The malware turns infected devices into NFC relays, allowing fraudsters to intercept card data in real-time and conduct physical cashouts, often leveraging a personalized social engineering campaign. This represents a significant evolution in Android malware and a combined approach to fraud, utilizing RAT capabilities alongside NFC relay functionality.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data