Android Malware WindRelay Steals Credit Card Data
TL;DR. A new Android NFC relay malware, WindRelay, is actively used with SpyNote RAT to steal live credit card data and facilitate fraudulent loans. - Attackers impersonate bank employees, tricking victims into installing SpyNote RAT and granting Accessibility Service permissions. - WindRelay then converts the victim's phone into a contactless reader, relaying NFC payment data and PINs to attackers. - The malware combination allows for real-time fraud, bypassing typical modern Android malware defenses.
- Android malware 'WindRelay' is stealing credit card data via NFC relay attacks.
- It works in conjunction with the SpyNote RAT, which is installed via social engineering.
- Attackers gain remote access to devices and trick victims into making their phones into fraudulent card readers.
- The method bypasses modern Android security features for real-time financial fraud.
Sources
- Android malware combo takes out loans and relays victims' credit cards — bleepingcomputer.com