Android devices are being targeted by a new malware-as-a-service (MaaS) platform, SuperCard X. The malware uses NFC relay attacks to conduct fraudulent point-of-sale and ATM transactions. Thought to be linked to Chinese-speaking hackers, the platform was discovered by mobile security firm Cleafy through attacks in Italy. It’s promoted on Telegram channels which also provide ‘customer’ support. Financial institutions are tricked by the software into thinking transactions are legitimate, making them difficult to identify and reverse.

New Gorilla Android Malware Intercept SMS Messages to Steal OTPs
A new Android malware named “Gorilla” intercepts SMS messages containing one-time passwords, primarily targeting banking customers and services like Yandex. It stealthily accesses sensitive information