New Android malware lets criminals use your bank card in real time

Researchers at Group-IB uncovered a campaign where attackers use social-engineering phone calls to trick victims into installing SpyNote RAT, which silently installs a second app, WindRelay, that relays live NFC payment card data to criminals; this enables real-time fraudulent purchases and ATM withdrawals by relaying the victim’s tap and cryptographic transaction data to a device presented at a payment terminal.