Scworld
NFC Relay Attack Campaign 'RelayNFC' Targets Brazilian Users
First seen 26 Nov 2025, 19:33 UTC
•
•89% similarity
•24.3
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
Cyble Research and Intelligence Labs have identified a new NFC relay attack campaign named 'RelayNFC' in Brazil. This campaign involves a malicious app distributed through phishing sites that falsely claims to secure payment cards while capturing users' card details for fraudulent transactions. The malware is described as lightweight, evasive, and utilizes a Hermes-compiled payload with a JavaScript engine.
ThreatCluster AI