McAfee warns of NFC malware risk
McAfee sounds alarm over NFC malware problems.


McAfee has warned that Near Field Communications (NFC) could allow mobile devices to become infected by touching other phones infected with malware.
The IT security firm said the technology has made smart devices, such as smartphones and tablets, more attractive to cybercriminals.
As a result, the company said it expects to see criminals abuse the tap-and-pay NFC technology used in mobile payment programs or "digital wallets" in "bump and infect" scams that use worms to propagate through proximity.
The distribution path can quickly spread malware through a group of people on a passenger-loaded train or at an amusement park, for example. When the newly-infected device is used to "tap and pay" for the next purchase, the scammer collects the details of the wallet account and secretly reuses these credentials to steal from the wallet.
Worm malware like this will spread by exploiting vulnerabilities on devices, warned McAfee, and could be used to "monetise the 11.8 per cent of malware families that already contain exploit behaviours."
The company cited figures from research firm IDC that show smart devices are surpassing PCs as the preferred way to access the internet. The number of people using PCs to go online will shrink by 15 million over the next four years, while mobile users are expected to increase by 91 million, according to IDC.
Luis Blando, vice president of mobile product development at McAfee, said, despite elevated consumer awareness of threats on mobile platforms, there is still a significant knowledge gap surrounding how and when devices become infected and the level of potential damage.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
"Cybercriminals are exhibiting greater levels of determination and sophistication leading to more destructive, multi-faceted hacks that are harder to spot, and thus warrant a greater degree of security and vigilance," said Blando.
McAfee also warned that criminals are increasingly looking at ways to generate revenue from mobile devices.
During 2012, about 16 per cent of malware families detected by McAfee attempted to get devices to subscribe to premium SMS messages, and the company predicts we will see an increase in threats that will result in users only finding out they have bought premium apps when they check their bills.
Rene Millman is a freelance writer and broadcaster who covers cybersecurity, AI, IoT, and the cloud. He also works as a contributing analyst at GigaOm and has previously worked as an analyst for Gartner covering the infrastructure market. He has made numerous television appearances to give his views and expertise on technology trends and companies that affect and shape our lives. You can follow Rene Millman on Twitter.
-
Third time lucky? Microsoft finally begins roll-out of controversial Recall feature
News The Windows Recall feature has been plagued by setbacks and backlash from security professionals
By Emma Woollacott Published
-
The UK government wants quantum technology out of the lab and in the hands of enterprises
News The UK government has unveiled plans to invest £121 million in quantum computing projects in an effort to drive real-world applications and adoption rates.
By Emma Woollacott Published
-
McAfee and Visa offer 50% off antivirus subscriptions for small businesses
News UK Visa Classic Business card holders can access the deal starting today
By Zach Marzouk Published
-
McAfee Total Protection review: Expensive at full price
Reviews Protects your PC and includes a decent firewall, but costly and less effective than some rivals
By K.G. Orphanides Published
-
McAfee Total Protection review: Quick, effective and affordable
Reviews A solid security choice, with perfect malware protection, a fully functional VPN and more
By ITPro Published
-
McAfee’s zero trust solution strengthens private applications’ security
News MVISION Private Access grants secure access to private resources from any device or location
By Praharsha Anand Published
-
PowerShell threats increased over 200% last year
News A new McAfee report finds PowerShell attacks driven largely by Donoff malware.
By Rene Millman Published
-
McAfee to sell enterprise business to STG for £2.8 billion
News The enterprise business will be rebranded, with McAfee focusing on personal security
By Daniel Todd Published
-
Has the US government finally nabbed John McAfee?
News Official Twitter account claims notorious tech tycoon has been “detained by authorities”
By Adam Shepherd Published
-
John McAfee ordered to pay $25 million over neighbour's murder
News Controversial figure insists that he will not pay
By Adam Shepherd Published