NFC-Powered Android Malware Enables Instant Cash-Outs

Researchers from Cleafy identified 'SuperCard X', a Chinese-speaking MaaS Android malware that hides inside seemingly benign apps and uses an NFC-relay technique to capture victims' contactless card data and relay it in real time to attacker-controlled devices; attackers then perform immediate contactless payments or ATM withdrawals. The campaign leverages social-engineering via SMS/WhatsApp, requests minimal Android permissions to evade AV detection, includes published IoCs, and has been observed targeting Italy.