New Android malware relays bank cards to fraudsters while victims still hold them
Group-IB discovered WindRelay Android malware that streams NFC card data in real time, paired with SpyNote RAT, targeting Czechia, Slovakia, and Slovenia.
65
Malware
WindRelay
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 12, 2026
- Last mentionedAug 17, 2026
Timeline
3 articles · newest firstWindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud
Group-IB details WindRelay, a new Android NFC relay malware paired with SpyNote RAT to relay card data live for contactless payment fraud and loans.
56
WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam
New WindRelay Android NFC-relay malware paired with SpyNote RAT enables real-time card cloning during live scam calls.
58
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.