Zimperium zLabs discovered over 760 Android apps misusing NFC and HCE to steal payment data, with a notable increase in attacks since April 2024. These malicious apps impersonate trusted institutions and operate through a command-and-control system, making detection difficult. Financial institutions and users need to be wary of unfamiliar apps requesting NFC access.

This article analyzes security flaws in various NFC technologies, including MIFARE Ultralight C and NTAG 223/224 DNA. It reveals how attackers can exploit these weaknesses to recover cryptographic keys through relay attacks and memory manipulation, highlighting the risks in real-world deployments.

A new report from Zimperium reveals a rise in NFC relay malware targeting Android users' tap-to-pay systems. Over 760 malicious apps have been found that impersonate legitimate banking applications to steal payment data and facilitate fraud. Users are advised to download apps only from the Google Play Store and stay vigilant against unknown payment requests.