Contactless credit cards can typically be used without a pin for transactions under €10 by simply holding the card near a point of sale terminal.
The Android application, which Symantec detects as Android.Ecardgrabber, attempts to read this data by using a communication protocol called Near Field Communication (NFC)— a technology present on the latest smartphones. The app was posted on Google Play on June 13 and was downloaded 100-500 times before removal.