This data is intercepted in real-time and relayed through a command-and-control (C2) infrastructure to a second, attacker-controlled Android device," according to Cleafy.

Newly discovered Android malware steals payment card data using an infected device’s NFC reader and relays it to attackers, a novel technique that effectively clones the card so it can be used ...