Android malware enables theft of bank card data and loans taken out in victims’ names

A new Android NFC relay malware, WindRelay, was used together with the SpyNote remote administration tool to steal bank card data in real time and take out a loan through the victim’s banking app. In the incident, a fraudster impersonated a bank employee and persuaded the victim to install a malicious app and grant it Accessibility Service permissions.