NFC Relay Attack Campaign 'RelayNFC' Targets Brazilian Users

NFC Relay Attack Campaign 'RelayNFC' Targets Brazilian Users

First seen 26 Nov 2025, 19:33 UTC ThecyberexpressScworld 89% similarity 24.3

Article Content

Browse articles
ThreatCluster

Cyble Research and Intelligence Labs have identified a new NFC relay attack campaign named 'RelayNFC' in Brazil. This campaign involves a malicious app distributed through phishing sites that falsely claims to secure payment cards while capturing users' card details for fraudulent transactions. The malware is described as lightweight, evasive, and utilizes a Hermes-compiled payload with a JavaScript engine.

ThreatCluster AI

Community

Browse all →