Europe Hit by Massive NFC Relay Malware Attacks Targeting Payment Cards in 2024
In early 2024, cybersecurity researchers uncovered a sweeping campaign across Eastern Europe involving over 760 malicious Android apps leveraging NFC (Near-Field Communication) relay malware. Threat actors distributed these apps through unofficial channels, targeting unsuspecting users to intercept and relay credit card information during contactless transactions. Once installed, the malware exploited device-level NFC permissions to steal payment credentials, enabling attackers to commit significant financial fraud and undermine consumer trust in mobile payments. The primary impact has been large-scale theft from compromised cards, increased banking fraud, regulatory concern, and widespread consumer exposure. This incident signals a sharp escalation in mobile payment threats and demonstrates how sophisticated cybercriminals now target embedded hardware features. Organizations face new challenges in defending against evolving mobile malware, with compliance and security standards coming under increased scrutiny.
Kill Chain
