WindRelay Android NFC relay combines with SpyNote RAT to steal cards
Source headline: Android malware combo takes out loans and relays victims' credit cards
Intelligence Summary
WindRelay is an Android NFC relay malware that targets card payments. The campaign uses WindRelay alongside the SpyNote remote administration tool (RAT). The malware can steal live card data and send it to attackers in real time. Victims' credit cards are relayed as part of the process. Users should treat NFC payment paths as high risk and use mobile security protections to reduce exposure.
Recommended Action
Confirm whether the affected technology is in use in your environment before deciding on remediation. Until then, watch authentication and outbound traffic logs for the indicators described in the source. This signal rests on a single report, so corroborate it before acting on anything irreversible.