WindRelay Malware Turns Phones Into NFC Payment Relays

WindRelay, a new Android NFC relay malware, works with the SpyNote RAT to capture live card data and stream it to fraudsters in real time. First detected in late August 2025, it turns victims' phones into payment proxies via phishing, smishing, or vishing scams.