New Android malware steals your credit cards for NFC relay attacks
'SuperCard X' is a new malware-as-a-service (MaaS) platform that targets Android smartphones through NFC relay attacks that use hijacked credit card data to facilitate ATM and point-of-sale transactions.
The open-source project NFCGate and its malicious offspring, NGate, which has enabled attacks in Europe since last year, share code with SuperCard X, which is associated with Chinese-speaking threat actors.
Telegram channels that provide direct customer support are used to advertise the malware-as-a-service platform.
The mobile security company Cleafy found SuperCard X and states that it has seen assaults using this Android malware in Italy. Multiple samples with minor variations were used in these attacks, suggesting that affiliates are given the choice of custom builds made to ...