Cybersecurity Alert: NFC Scam Targeting Spanish Banks

ESET's cybersecurity research department has identified an active scam in Spain exploiting the NFC capabilities of mobile phones to steal banking data from users of major banks such as Santander, CaixaBank, and Unicaja. The scam starts with phishing messages urging victims to download a fraudulent app disguised as a security tool. Once installed, it requests users to bring their contactless cards near their phones, allowing attackers to capture sensitive data, including card information and PIN codes.

This scam marks a significant escalation in banking fraud tactics, leveraging widespread NFC technology to create convincing deceptions. The implications are dire, as it highlights vulnerabilities in mobile banking security, emphasizing the need for awareness and caution among users against unsolicited messages. Experts advise relying on direct communication with banks for security concerns, rather than through links provided in dubious messages or apps.