DevilNFC Android Malware Uses Kiosk Mode to Trap Victims During NFC Relay Attacks

Cybersecuritynews •Tushar Subhra Dutta • May 20, 2026

A dangerous new Android malware called DevilNFC has emerged, combining NFC relay attacks with a Kiosk Mode trap that locks victims inside a fake banking screen until their card data is stolen. The malware targets customers across Europe and LATAM with technical precision rarely seen in independently built tools. Unlike threats, DevilNFC does not […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

DevilNFC Malware Exploits NFC Relay Attacks on Android Devices The newly discovered DevilNFC malware targets Android users by employing NFC relay attacks combined with a Kiosk Mode trap. Victims are locked into a fake banking interface, allowing attackers to steal card data. The malware is particularly effective against users in Europe and Latin America, showcasing a high level of technical sophistication. Unlike previous malware campaigns, DevilNFC is developed independently rather than through established Malware-as-a-Service platforms. The emergence of this malware marks a significant evolution in the threat landscape surrounding NFC technology. No specific CVEs have been reported yet, and the full scope of the impact remains under investigation. Cybersecurity experts are urging users to remain vigilant against potential NFC-related threats. 2 sources 67

Extracted Entities

DevilNFC Android Malware Uses Kiosk Mode to Trap Victims During NFC Relay Attacks

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (2)