Android malware combo takes out loans and relays victims’ credit cards
Along with the SpyNote remote administration tool (RAT), a new Android NFC relay malware known as WindRelay is being utilized to collect card information and transmit it to attackers instantly.
Group-IB, a cybersecurity firm, looked into an incident in which a fraudster called the victim under the guise of a payment card issue while posing as a bank employe.
In order to give the attacker remote access to the Android smartphone, the threat actor urged the victim to sideload the SpyNote RAT—which was posing as a genuine app—and grant it Accessibility Service capabilities during the conversation.
The attacker added the victim's name to the malicious program label to give it more legitimacy. Without further communication with the victim, the attacker installed WindRelay and used the ...