SpyNote + WindRelay lets fraudsters take loans, swipe cards via Android NFC
A fraudster used the SpyNote RAT to sideload WindRelay on a victim’s Android phone, granting remote control and turning the device into a fake NFC reader. In a 13‑minute call the attacker opened a loan in the victim’s name and relayed live card data for purchases, showing how social engineering can drive real‑time financial theft.