ANDROID MALWARE DUO STEALS CARDS, OPENS LOANS

Security researchers have identified WindRelay, an NFC relay malware, working in tandem with SpyNote RAT to target Android users. The combination enables attackers to intercept live payment card data and relay it to command servers without victims' knowledge. The malware leverages NFC (near-field communication) capabilities to capture card information during transactions, while SpyNote provides remote control functionality for broader device access. Attackers use the stolen data to open unauthorized loans and conduct fraudulent purchases. The dual-malware approach represents an escalation in Android threats, combining specialized financial theft with general-purpose remote access. Users are advised to avoid sideloading apps, keep devices updated, and monitor financial accounts for unauthorized activity. Security vendors are actively tracking the malware's distribution channels and command infrastructure.