Fraudsters make virtual clones of Russian cards using spyware

VTB specialists tracked the most actively spreading fraudulent scheme in November and December. It combines two strategies: social engineering and spyware to steal customer card data, make a clone of it and pay in stores through NFC terminals.

Fraudsters call the victim, posing as employees of a mobile operator, and inform them of the need to renew the service contract. To do this, the client is asked to install the operator's mobile application. Other “legends” can also be used – antivirus updates, medical service applications, etc. This malware is actually spyware. It allows attackers to remotely control the device, including the camera, microphone and NFC functions.

After the owner of the smartphone…