CYBERSECURITYTRACKER
TRACKING7,811 stories in this site build1,697 vulnerability news stories in this site build
Permanent story citation

New Android malware relays bank cards to fraudsters while victims still hold them

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4457

As cited

Copy frozen at (site build).

threat intel

New Android malware relays bank cards to fraudsters while victims still hold them

Group-IB researchers disclosed WindRelay, a new Android malware that captures payment card data via NFC (Near Field Communication) and transmits it to attackers in real time. The malware pairs with SpyNote, a remote access trojan, to give attackers control over the victim's device. The attack begins with a fraudulent phone call claiming to be from the victim's bank.

Why it matters: Android users and financial institutions face exposure to real-time card theft while victims hold their phones; practitioners should monitor for WindRelay and SpyNote distribution and alert customers to avoid answering unsolicited calls from purported banks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

New Android malware relays bank cards to fraudsters while victims still hold them

Group-IB researchers disclosed WindRelay, a new Android malware that captures payment card data via NFC (Near Field Communication) and transmits it to attackers in real time. The malware pairs with SpyNote, a remote access trojan, to give attackers control over the victim's device. The attack begins with a fraudulent phone call claiming to be from the victim's bank.

Why it matters: Android users and financial institutions face exposure to real-time card theft while victims hold their phones; practitioners should monitor for WindRelay and SpyNote distribution and alert customers to avoid answering unsolicited calls from purported banks.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary