MalwarePublished 8 Jun 2026

NFCShare Android malware spreads via fake banking app updates on GitHub

Source Bleeping Computer

android

Description

New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. [...]

Impact

The malware enables attackers to steal sensitive payment card information and PINs from victims, which can be used to conduct NFC payment relay attacks and potentially fraudulent transactions. This compromises the confidentiality and integrity of victims' financial data. The attack targets banking app users in Europe, primarily Italy and Spain, expanding from an initial focus on Germany. The use of social engineering and fake app updates increases the risk of successful infection.

Defensive guidance

Users should only download banking apps and updates from official sources such as Google Play and avoid installing APKs from third-party sites like GitHub. Enabling Google Play Protect can help detect malicious apps. Users should be cautious of unsolicited verification requests that prompt NFC card scans. Security teams should educate users about phishing tactics involving fake banking sites and app updates.

References

bleepingcomputer.com/news/security/nfcshare-android-malware-spreads-via-fake-banking-app-updates-on-github/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 8 Jun 2026, 22:18 UTC

References

Community reviews

Related threats