Rapid Response: Zimperium Detects SuperCardX NFC Relay Fraud Operation

A Cleafy report describes "SuperCardX", a modular Malware-as-a-Service that enables NFC relay fraud to perform unauthorized contactless transactions and ATM withdrawals by relaying communication between victims' NFC-enabled devices and payment terminals; the malware provides remote device control and credential theft, has low detection rates in the industry, and samples were shared that Zimperium's mobile defenses reportedly detect in a zero-day fashion.