This Android Malware Silently Steals Your Credit Card Data Over NFC

Threat actors are getting more creative when distributing their malware as users become better educated and platforms introduce policy changes to better prevent scams. New malware, however, has been uncovered by the researchers at security firm ESET, who have explained how a legitimate NFC app has been repurposed for a maliscious campaign.

The attackers have chosen to weaponize HandyPay, a legitimate NFC payment app that’s been available on the Google Play Store for several years, lacing it with code from an updated version of the NGate malware family. The infected app is distributed through a web page designed to mimic the official Play Store, with links being sent to potential victims using WhatsApp.

Once installed on a victim’s device the app operates the way a user would expect, however, in the background it collects and then sends payment data, including credit card numbers and security PINs, to a ...