NFC-EMV-RELAYLateral Movement

Generic EMV Contactless Relay

Two devices proxy ISO/IEC 14443 frames between victim's contactless card and a real terminal — performs transactions without victim presence.

§ Where this technique fits

NFC-EMV-RELAY is catalogued under the Lateral Movement tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 1 on average.

§ Dossiers chaining this technique

Apple Pay Express Transit relay → high-value contactless fraud
Specific configuration (Express Transit + Visa) allowed contactless transactions over £1k without unlock or per-tx auth. Two devices relayed the wallet from victim's pocket to a real terminal.
step 1 / 6

§ What commonly comes next

01
Pretexting
SE-PRETEXT · Initial Access
seen 1×

§ Where this technique fits

§ Dossiers chaining this technique

Apple Pay Express Transit relay → high-value contactless fraud

§ What commonly comes next