{"id":47056,"date":"2026-07-04T14:50:17","date_gmt":"2026-07-04T14:50:17","guid":{"rendered":"https:\/\/cryptomag.finance\/?p=47056"},"modified":"2026-07-04T14:50:17","modified_gmt":"2026-07-04T14:50:17","slug":"hackers-draining-android-users-bank-accounts-as-tap-to-pay-malware-spreads-report","status":"publish","type":"post","link":"https:\/\/cryptomag.finance\/?p=47056","title":{"rendered":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report"},"content":{"rendered":"<p><img decoding=\"async\" width=\"1024\" height=\"600\" src=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2026\/07\/hacker-target-banking.jpg?resize=1024,600\" class=\"webfeedsFeaturedVisual wp-post-image\" alt=\"\" loading=\"lazy\" \/><\/p>\n<p>Android users are increasingly being targeted by malware that steals their payment card details through tap-to-pay technology.<\/p>\n<p>U.S. law enforcement is already making <a href=\"https:\/\/knoxsheriff.org\/tap-2-pay-fraud-scheme-bust\/\" rel=\"noopener\" target=\"_blank\">arrests<\/a> and issuing <a href=\"https:\/\/www.texasbankers.com\/fcic-issues-bulletin-on-merchant-processing-app-crimes\/\" rel=\"noopener\" target=\"_blank\">warnings<\/a> to banks about Android malware that steals data by tricking users into tapping their physical cards against their devices.<\/p>\n<p>Now, the cybersecurity firm D3Lab <a href=\"https:\/\/www.d3lab.net\/nfcshare-evolves-from-a-banking-phishing-apk-to-a-github-hosted-android-nfc-fraud-campaign\/\" rel=\"noopener\" target=\"_blank\">says<\/a> a fresh wave of attacks has been detected, with cyberthieves deploying tap-to-pay malware attacks against Italian and other European banks.<\/p>\n<p>Users are often lured with urgent messages claiming they need to update their banking app, which leads them to download harmful software.<\/p>\n<p>Once installed, the malware displays a fake verification screen and prompts the user to hold their real payment card near the phone. It reads the card information and PIN, then sends the stolen data to the attackers.<\/p>\n<p>To stay ahead of detection, the criminals frequently change the fake websites, rotate which banks they pretend to represent, and use new hosting methods that are harder for authorities to shut down.<\/p>\n<p>The technique works on Android because apps have greater access to the NFC chip, while Apple heavily restricts what third-party apps can do with NFC on iPhones.<\/p>\n<p>In this latest wave, D3Lab says harmful files are now being stored and frequently updated on GitHub, the popular website normally used by programmers to share code. The attackers push out new versions often, using different bank names and technical tricks to avoid being blocked.<\/p>\n<p>This constant adaptation allows the same type of card theft to continue reaching Android users despite ongoing security efforts.<\/p>\n<p><em><span>Follow us on <a href=\"https:\/\/x.com\/TheDailyHodl\" target=\"_blank\" rel=\"noopener\">X<\/a>, <a href=\"https:\/\/www.facebook.com\/thedailyhodl\/\" target=\"_blank\" rel=\"noopener\">Facebook<\/a> and <a href=\"https:\/\/t.me\/thedailyhodl\" target=\"_blank\" rel=\"noopener\">Telegram<\/a><\/span><\/em><br \/>\n<br \/>\n<em><span>Don&#8217;t Miss a Beat \u2013 <a href=\"https:\/\/dailyhodl.com\/join-the-daily-hodl-email-list\/\" target=\"_blank\" rel=\"noopener\">Subscribe<\/a> to get email alerts delivered directly to your inbox <\/span><\/em><br \/>\n<br \/>\n<em><span>Surf <a href=\"https:\/\/dailyhodl.com\/daily-hodl-mix\">The Daily Hodl Mix<\/a><\/span><\/em><br \/>\n<\/p>\n<div class=\"hideinamp\">\n<div class=\"dianomi_context\" data-dianomi-context-id=\"736\"><\/div>\n<p>&amp;nbsp<\/p>\n<h6>Disclaimer: Opinions expressed at The Daily Hodl are not investment advice. Investors should do their due diligence before making any high-risk investments in Bitcoin, cryptocurrency or digital assets. Please be advised that your transfers and trades are at your own risk, and any losses you may incur are your responsibility. The Daily Hodl does not recommend the buying or selling of any assets including cryptocurrencies, nor is The Daily Hodl an investment advisor. Please note that The Daily Hodl participates in affiliate marketing.<\/h6>\n<\/div>\n<p><span><em>Generated Image: Midjourney<\/em><\/span><\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/2026\/07\/04\/hackers-draining-android-users-bank-accounts-as-tap-to-pay-malware-spreads-report\/\">Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/dailyhodl.com\/\">The Daily Hodl<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Android users are increasingly being targeted by malware that steals their payment card details through tap-to-pay technology. U.S. law enforcement is already making arrests and issuing warnings to banks about Android malware that steals data by tricking users into tapping their physical cards against their devices. Now, the cybersecurity firm D3Lab says a fresh wave [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":47057,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[],"tags":[],"class_list":["post-47056","post","type-post","status-publish","format-standard","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.9 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptomag.finance\/?p=47056\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag\" \/>\n<meta property=\"og:description\" content=\"Android users are increasingly being targeted by malware that steals their payment card details through tap-to-pay technology. U.S. law enforcement is already making arrests and issuing warnings to banks about Android malware that steals data by tricking users into tapping their physical cards against their devices. Now, the cybersecurity firm D3Lab says a fresh wave [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptomag.finance\/?p=47056\" \/>\n<meta property=\"og:site_name\" content=\"Cryptomag\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-04T14:50:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyhodl.com\/wp-content\/uploads\/2026\/07\/hacker-target-banking.jpg?resize=1024,600\" \/>\n<meta name=\"author\" content=\"Crypto Magazine\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:site\" content=\"@cryptomagz\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Crypto Magazine\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056\"},\"author\":{\"name\":\"Crypto Magazine\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"headline\":\"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report\",\"datePublished\":\"2026-07-04T14:50:17+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056\"},\"wordCount\":402,\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/hacker-target-banking-3UW54f.webp\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056\",\"name\":\"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/hacker-target-banking-3UW54f.webp\",\"datePublished\":\"2026-07-04T14:50:17+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cryptomag.finance\\\/?p=47056\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#primaryimage\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/hacker-target-banking-3UW54f.webp\",\"contentUrl\":\"https:\\\/\\\/cryptomag.finance\\\/wp-content\\\/uploads\\\/hacker-target-banking-3UW54f.webp\",\"width\":1024,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/?p=47056#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cryptomag.finance\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#website\",\"url\":\"https:\\\/\\\/cryptomag.finance\\\/\",\"name\":\"Cryptomag\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cryptomag.finance\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cryptomag.finance\\\/#\\\/schema\\\/person\\\/f749cd846c4f13ef717c12a20ce9d040\",\"name\":\"Crypto Magazine\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g\",\"caption\":\"Crypto Magazine\"},\"sameAs\":[\"https:\\\/\\\/cryptomag.finance\",\"https:\\\/\\\/x.com\\\/cryptomagz\"],\"url\":\"https:\\\/\\\/cryptomag.finance\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptomag.finance\/?p=47056","og_locale":"en_US","og_type":"article","og_title":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag","og_description":"Android users are increasingly being targeted by malware that steals their payment card details through tap-to-pay technology. U.S. law enforcement is already making arrests and issuing warnings to banks about Android malware that steals data by tricking users into tapping their physical cards against their devices. Now, the cybersecurity firm D3Lab says a fresh wave [&hellip;]","og_url":"https:\/\/cryptomag.finance\/?p=47056","og_site_name":"Cryptomag","article_published_time":"2026-07-04T14:50:17+00:00","og_image":[{"url":"https:\/\/dailyhodl.com\/wp-content\/uploads\/2026\/07\/hacker-target-banking.jpg?resize=1024,600","type":"","width":"","height":""}],"author":"Crypto Magazine","twitter_card":"summary_large_image","twitter_creator":"@cryptomagz","twitter_site":"@cryptomagz","twitter_misc":{"Written by":"Crypto Magazine","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cryptomag.finance\/?p=47056#article","isPartOf":{"@id":"https:\/\/cryptomag.finance\/?p=47056"},"author":{"name":"Crypto Magazine","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"headline":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report","datePublished":"2026-07-04T14:50:17+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=47056"},"wordCount":402,"image":{"@id":"https:\/\/cryptomag.finance\/?p=47056#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/hacker-target-banking-3UW54f.webp","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/cryptomag.finance\/?p=47056","url":"https:\/\/cryptomag.finance\/?p=47056","name":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report - Cryptomag","isPartOf":{"@id":"https:\/\/cryptomag.finance\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cryptomag.finance\/?p=47056#primaryimage"},"image":{"@id":"https:\/\/cryptomag.finance\/?p=47056#primaryimage"},"thumbnailUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/hacker-target-banking-3UW54f.webp","datePublished":"2026-07-04T14:50:17+00:00","author":{"@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040"},"breadcrumb":{"@id":"https:\/\/cryptomag.finance\/?p=47056#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptomag.finance\/?p=47056"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptomag.finance\/?p=47056#primaryimage","url":"https:\/\/cryptomag.finance\/wp-content\/uploads\/hacker-target-banking-3UW54f.webp","contentUrl":"https:\/\/cryptomag.finance\/wp-content\/uploads\/hacker-target-banking-3UW54f.webp","width":1024,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/cryptomag.finance\/?p=47056#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptomag.finance\/"},{"@type":"ListItem","position":2,"name":"Hackers Draining Android Users\u2019 Bank Accounts As Tap-to-Pay Malware Spreads: Report"}]},{"@type":"WebSite","@id":"https:\/\/cryptomag.finance\/#website","url":"https:\/\/cryptomag.finance\/","name":"Cryptomag","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptomag.finance\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/cryptomag.finance\/#\/schema\/person\/f749cd846c4f13ef717c12a20ce9d040","name":"Crypto Magazine","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2c24e7a3322cdb9140c7dde381c870ae2c527e0dc5af67ed7a7db042bb2e1d14?s=96&d=mm&r=g","caption":"Crypto Magazine"},"sameAs":["https:\/\/cryptomag.finance","https:\/\/x.com\/cryptomagz"],"url":"https:\/\/cryptomag.finance\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/47056","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=47056"}],"version-history":[{"count":0,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/posts\/47056\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=\/wp\/v2\/media\/47057"}],"wp:attachment":[{"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=47056"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=47056"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptomag.finance\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=47056"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}