Chinese cybercriminals have released a tool called Z-NFC for conducting payment fraud using NFC technology.
Multiple Chinese cybercriminal groups have been targeting Google and Apple Wallet customers, abusing contactless payments and NFC technology.
The Z-NFC tool is being sold on Telegram and facilitates fraudulent transactions using Android-based phones and mobile wallets.
Cybercriminals exploit the lack of Cardholder Verification Method (CVM) for low-value contactless payments, enabling multiple small transactions with compromised cards.