The scam ends with the victim tapping their own card against their own phone
2026-08-17Gadgets
Group-IB's WindRelay pairs a reader on the victim's Android with an emulator at the attacker's terminal, relaying EMV commands over WebSocket in real time. SpyNote installs it silently; the victim is talked into the tap.
