Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More
Briefly

Security typically deteriorates gradually due to minor oversights, not from a singular catastrophic event. Prompt and clear action is essential to maintain safety and prevent escalating problems. Recent signals highlight critical areas for intervention, including the emergence of the PhantomCard trojan in Brazil, which exploits NFC technology for fraudulent banking transactions. Additionally, two critical vulnerabilities in N-able N-central have been discovered, being actively exploited, prompting immediate attention to user security. Furthermore, a new APT group, Curly COMrades, has been identified, targeting networks in Georgia and Moldova for cyber espionage.
Security usually doesn't fail all at once; it breaks slowly, then suddenly. Staying safe isn't about knowing everything-it's about acting fast and clear before problems pile up.
Ghost Tap NFC-Based Mobile Fraud takes off with a new Android trojan called PhantomCard, allowing relay attacks for fraudulent transactions targeting banking customers.
Two security flaws in N-able N-central, CVE-2025-8875 and CVE-2025-8876, have been actively exploited, allowing command execution and command injection.
The 'Curly COMrades' APT has been observing activities in Georgia and Moldova, facilitating long-term access to target networks through cyber espionage.
Read at The Hacker News
[
|
]