News

Public · Published

New Android Malware Lets Scammers Drain Bank Accounts and ATMs – Without Stealing Your Bank Card

Group-IB, a cybersecurity firm, said it found a new Android malware family named WindRelay. The malware captures live near-field communication (NFC) payment data, which is the short-range wireless signal used for tap payments, and forwards it to attackers in real time.

Published:

Updated:

What happened

Group-IB, a cybersecurity firm, said it found a new Android malware family named WindRelay. The malware captures live near-field communication (NFC) payment data, which is the short-range wireless signal used for tap payments, and forwards it to attackers in real time.

Confirmed

Global impact / market context

If attackers can relay tap payment data instantly, they could withdraw cash from ATMs and drain bank accounts without a stolen card. That raises costs for banks, payment networks, and phone makers to add fraud checks and customer reimbursements, which can reduce profit.

Analyst inference

This is a cybersecurity and payments fraud story, not a direct stock or crypto event. Companies tied to mobile payments, banking apps, and phone security could face pressure to spend more on fraud prevention, while investors in those areas may reassess risk.

Analyst inference

What to watch

  1. Group-IB named the malware family WindRelay and described it as previously unseen Android malware that captures live NFC payment data. Confirmed
  2. Banks and payment apps could tighten checks on tap payments made from phones, such as requiring extra confirmation for large cash withdrawals at ATMs. Proposed
  3. Investors may watch whether mobile payment providers and phone makers disclose added fraud prevention spending, since higher costs can lower profit per sale and slow new features. Analyst inference

Evidence