Smooth-talking fraudsters clone contactless cards, authorize payments in just 13 minutes

Android Phones Become Silent POS Terminals as WindRelay Malware Drains Cards in Real Time

Threat actors have found a way to transform ordinary Android smartphones into remote-controlled card readers. In a matter of minutes, they can siphon data from contactless payment cards and authorize fraudulent transactions thousands of miles away. The scheme, uncovered this week, pairs an established remote-access tool with a purpose-built NFC relay program. Banks and security teams now face a fast-moving fraud vector that collapses the window …

Android users targeted by new WindRelay malware which can clone contactless cards in just 13 minutes

WindRelay campaign used vishing plus custom malware to turn phones into POS skimmersVictims installed personalized RATs and NFC malware, enabling real‑time card theftAttacks were highly targeted across Eastern Europe, with only a few individuals hitHackers are turning people’s smartphones into malicious Point of Sale (POS) devices and stealing their money directly from their payment cards, experts have warned. Security researchers Group-IB spott…

Smooth-talking fraudsters clone contactless cards, authorize payments in just 13 minutes

A new social engineering and malware campaign targets Android users, stealing card details to make payments or withdraw cash. Group-IB discovered the campaign, calling it WindRelay, and found that several successful attacks were carried out on European victims within the space of a 13-minute phone call. The attack relies on a skilled social engineer walking the victim through the process and two malware strains: An NFC relay malware called WindR…