New NFCShare Android malware variants are distributed as fake banking app updates on GitHub. The malware targets European bank customers, stealing payment card data via NFC chip reading and a fake verification screen. It exfiltrates card numbers, expiry dates, and PINs to an attacker's C2 host over WebSocket.
Tap to vote and see what everyone thinks.
UNC3753 Uses Vishing and Physical Intrusions in U.S. Data Theft
Summary by ByteBrief