[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6GIjzcgjThBpU4KK97ZMW_Ie0ZtrjThXygPikdpH7AE":3},{"article":4,"iocs":43,"watch_terms":47,"solutions":48,"lesson":109},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":27},"d603ec8c-dc0f-4963-8ac8-712bc3c442d0","‼️ I have posted about this tool before, but this is a new forum post.\n\nA threat actor advertisin...","i-have-posted-about-this-tool-before-but-this-is-a-new-forum-post-a-threat-actor","‼️ I have posted about this tool before, but this is a new forum post.\n\nA threat actor advertising NFC RIPPER, an Android toolkit for conducting NFC relay attacks against payment terminals and ATMs.\n\nThe tool enables PIN bypass through multiple methods and allows remote card https:\u002F\u002Ft.co\u002FT3wpd21hU2","A threat actor is promoting NFC RIPPER, an Android malware toolkit designed to conduct NFC relay attacks against payment terminals and ATMs. The tool enables PIN bypass and remote card manipulation, representing a direct threat to payment infrastructure and financial systems.","NFC RIPPER Android toolkit advertised for NFC relay attacks on payment terminals and ATMs.","https:\u002F\u002Fx.com\u002FDarkWebInformer\u002Fstatus\u002F2040199197928874310","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHFA-T_kaYAAsCKo.jpg","2026-04-03T22:46:08+00:00","2026-04-03T23:00:13.994442+00:00",7,[17,20],{"name":18,"type":19},"Android","technology",{"name":21,"type":19},"NFC","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":22,"icon":24,"name":25,"slug":26},null,"Malware","malware",[28,33,38],{"category":29},{"id":30,"icon":24,"name":31,"slug":32},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":34},{"id":35,"icon":24,"name":36,"slug":37},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":39},{"id":40,"icon":24,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44],{"type":26,"value":45,"context":46},"NFC RIPPER","Android toolkit for NFC relay attacks on payment terminals and ATMs with PIN bypass capability",[],{"controls":49,"vendors":108},[50,79],{"slug":51,"name":52,"problem":53,"products":54},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[55,63,71],{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"slug":80,"name":81,"problem":82,"products":83},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",[],{"slug":110,"title":111,"body":112,"framework_refs":113,"framework_notes":119},"nfc-relay-attack-tool-threatens-payment-infrastructure","NFC Relay Attack Tool Threatens Payment Infrastructure","Threat actors are actively promoting NFC RIPPER, a sophisticated Android malware toolkit that enables criminals to conduct relay attacks against payment terminals and ATMs. The tool bypasses PIN requirements and allows remote manipulation of payment cards, directly targeting the foundational security mechanisms of financial infrastructure. This represents a significant escalation in mobile-based payment fraud, as attackers can now weaponize common Android devices to compromise point-of-sale systems. Organizations must recognize that NFC-enabled payment systems are increasingly vulnerable to proximity-based attacks that exploit the trust relationship between cards and terminals.",[114,115,116,117,118],"CIS Control 14","NIST SP 800-53 SC-8","PCI DSS Requirement 9","NIST Cybersecurity Framework PR.DS-1","ISO 27001 A.11.2.1",{}]