RelayNFC Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 25, 2025
Last Seen
June 8, 2026

RelayNFC is a malware family tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed November 25, 2025; most recent activity June 8, 2026.

Related Threat Clusters

  • NFCShare Android Malware Targets Banking Apps to Steal Card Data

    NFCShare, an Android malware, is spreading through fake updates for legitimate banking apps on GitHub. This malware targets users across Europe, particularly in Italy and Spain, by tricking them into sideloading…

    7 articles · Updated June 9, 2026
  • NFC Relay Attack Campaign 'RelayNFC' Targets Brazilian Users

    Cyble Research and Intelligence Labs have identified a new NFC relay attack campaign named 'RelayNFC' in Brazil. This campaign involves a malicious app distributed through phishing sites that falsely claims to secure…

    2 articles · Updated November 26, 2025

Recent Intelligence Reports

  • NFCShare Android malware spreads via fake banking app updates on GitHub — Bleepingcomputer · June 8, 2026
  • NFC relay attack campaign 'RelayNFC' unveiled in Brazil — Scworld · November 26, 2025
  • New NFC Relay Attack Campaign Identified by Cyble Researchers — Thecyberexpress · November 25, 2025

CVSS v3.1 Breakdown