New payment-card scam involves a phone call, some malware and a personal tap

Summary: A new scam combining social engineering and the use of undocumented malware takes advantage of mobile NFC capabilities to compromise payment card details. Researchers from Cleafy have tracked this scheme, dubbed SuperCard X, which primarily targets Android users and has origins linked to attacks in Italy. The malware enables fraudsters to steal funds directly by exploiting NFC technology after tricking victims into revealing sensitive information and bringing their cards close to infected devices.

Affected: Financial institutions and their customers worldwide

Keypoints :

• Fraudsters target Android devices using social engineering tactics and malware.
• The SuperCard X malware captures payment card details through NFC technology.
• Cybersecurity warnings indicate that this type of scam could be active globally due to its malware-as-a-service nature.