[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk7DwqPeZ-NWWgCisbkSiw9OsYlntHaqc9CwMK9RbTdg":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":17,"created_at":18,"published_at":19,"article":20,"tags":24,"podcasts":37},"89a70a1f-1f35-45ac-a0c2-fce5072a20ef","nfcshare-malware-exploits-fake-banking-updates-and-social-engineering","c7f6d833-21be-48aa-9410-81e00515f639","NFCShare Malware Exploits Fake Banking Updates and Social Engineering","Attackers distributed NFCShare Android malware through fake banking app updates hosted on GitHub, exploiting users' trust in official-looking software sources. The malware uses social engineering to trick victims into placing payment cards near their device's NFC reader, enabling attackers to steal card data for relay attacks. This incident highlights how threat actors combine supply chain compromise (fake app distribution) with user manipulation to bypass technical security controls and steal sensitive financial information.","**Immediate actions:**\n- Verify all app downloads come from official app stores or verified vendor websites\n- Enable app installation restrictions to block unknown sources by default\n- Educate users to never place payment cards near mobile devices when prompted by apps\n\n**Long-term improvements:**\n- Implement mobile device management (MDM) solutions to control app installation sources\n- Establish regular security awareness training focused on social engineering tactics\n- Deploy mobile threat detection solutions to identify malicious apps and behaviors\n\n**Detection measures:**\n- Monitor for unusual NFC activity and unauthorized app installations on corporate devices\n- Implement behavioral analytics to detect anomalous mobile app usage patterns",[12,13,14,15,16],"CIS Control 2","CIS Control 14","NIST SP 800-124","NIST Cybersecurity Framework PR.AT-1","GDPR Article 32","published","2026-06-09T00:20:29.620131+00:00","2026-06-09T00:20:29.323+00:00",{"id":7,"url":21,"slug":22,"title":23},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fnfcshare-android-malware-spreads-via-fake-banking-app-updates-on-github\u002F","nfcshare-android-malware-spreads-via-fake-banking-app-updates-on-github-3c083c","NFCShare Android malware spreads via fake banking app updates on GitHub",[25,31],{"id":26,"name":27,"slug":28,"description":29,"color":30},"7261eb8f-acd4-4d93-a489-7fdd652ec0ea","Security Awareness","security-awareness","Phishing, social engineering, human error","#22c55e",{"id":32,"name":33,"slug":34,"description":35,"color":36},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[]]