---
title: Prilex Malware Blocks Contactless Payments to Steal Credit Card Information
description: Prilex Malware Blocks Contactless Payments to Steal Credit Card Information
---

[Securafy Knowledge Hub](https://blog.securafy.com)

- [Topics](https://blog.securafy.com/#sf-cover)
- [Tools](https://blog.securafy.com/#sf-tools)
- [Books & Guides](https://blog.securafy.com/#sf-books)

[Talk to Securafy](https://meetings.hubspot.com/securafy/strategy-call)

[Topics](https://blog.securafy.com/#sf-cover) [Tools](https://blog.securafy.com/#sf-tools) [Books & Guides](https://blog.securafy.com/#sf-books) [Talk to Securafy](https://meetings.hubspot.com/securafy/strategy-call)

[Knowledge Hub](https://blog.securafy.com) / IT Operations

IT Operations

# Prilex Malware Blocks Contactless Payments to Steal Credit Card Information

Prilex Malware Blocks Contactless Payments to Steal Credit Card Information

![Randy Hall](https://blog.securafy.com/hubfs/Randy%20Hall%202.png) By Randy Hall Updated Jul 2024 4 min read Share [**](https://www.linkedin.com/sharing/share-offsite/?url=https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information) [**](https://twitter.com/intent/tweet?url=https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information&text=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPrilex+Malware+Blocks+Contactless+Payments+to+Steal+Credit+Card+Information%3C%2Fspan%3E) [**](mailto:?subject=%3Cspan+id%3D%22hs_cos_wrapper_name%22+class%3D%22hs_cos_wrapper+hs_cos_wrapper_meta_field+hs_cos_wrapper_type_text%22+style%3D%22%22+data-hs-cos-general-type%3D%22meta_field%22+data-hs-cos-type%3D%22text%22+%3EPrilex+Malware+Blocks+Contactless+Payments+to+Steal+Credit+Card+Information%3C%2Fspan%3E&body=https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information)

![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png)The hackers behind Prilex PoS (point-of-sale) malware have developed a new way to steal credit card information to target customers using contactless or “tap-to-pay” payments.

Prilex PoS malware has stolen credit card information from payment terminals and ATMs before, but only if the customer physically inserts their card. Originally, the malware targeted ATM users withdrawing cash, but during the COVID-19 pandemic, more people began relying on digital payments. In 2021, contactless payments netted over $34.55 billion.

Each time a customer pays for something using the NFC (near-field communications) contactless payment method, the PoS system generates a one-time-use credit card number unique to that transaction. These one-time credit card numbers are safe from hackers. So as more customers transition to using contactless pay, the Prilex malware has evolved to force customers to insert their cards. When the card is inserted, the Prilex malware can access the credit card information.

Three new Prilex variants (06.03.8070, 06.03.8072, and 06.03.8080) released in November 2022 can now block contactless transactions, forcing manual insertion of the credit card at the payment terminal. Prilex uses a rule-based file to detect when an NFC chip generates the one-time-use credit card number and rejects it as not working properly. Customers at grocery stores, coffee shops, and other establishments will see an error response stating, “Contactless error, insert your card.” When customers physically use their cards, Prilex gains access to their credit card information.

**Prilex Targets High-Tier Credit Cards**  
 While any type of malware that targets credit card information can cause significant issues for consumers, the hackers behind the Prilex POS malware want to focus on cards with a near guarantee to carry a high limit. The malware detects high-tier credit cards like corporate cards or Black cards and only steals that information. This system allows the malware creators and their users to target cards with high transaction limits and weed out credit cards with low limits or available balances.

Besides allowing access to credit card information, hackers using Prilex can use that information to discover further details on the owner of the card. Credit card users with high limits may discover that their identity has been stolen. With such private information, Prilex operators can open new credit cards, apply for loans, or even dox (spread private information in public internet forums) the user.

**Response to Combat the New Prilex Malware**  
 IR teams (incident response teams) within organizations should prepare for how to handle hijacked credit cards infected by Prilex-targeted modular point-of-sale systems. While no one can tell whether a PoS system carries the Prilex malware, keeping an eye out for unexpected purchases can help internal IT and accounting teams catch an affected card. Canceling the card and ordering a replacement stops fraudulent purchases by Prilex operators.

Malware such as this is a growing threat to businesses and consumers alike. With the ability to steal credit card information and target high-tier credit cards, it is important for business owners to be aware of the dangers of this malware and take steps to protect themselves and their customers. This can be done by monitoring for unexpected purchases, canceling affected cards, and implementing safeguards in their systems. By staying informed and proactive, businesses can avoid the costly consequences of a malware infection and ensure the security of their customer's sensitive information.

Tagged Under IT Operations[Cybersecurity](https://blog.securafy.com/tag/cybersecurity)Business Continuity

In This Article

Need Help With Your Current Setup?

Talk through your current systems, risks, and support gaps with Securafy.

[Book a Strategy Call](https://meetings.hubspot.com/securafy/strategy-call)

## Join The Conversation

Have a question or perspective on this topic? Add it below.

![Randy Hall](https://blog.securafy.com/hubfs/Randy%20Hall%202.png)

About The Author

Randy Hall · CEO & Founder

Randy Hall is the CEO and Founder of Securafy, with decades of experience helping organizations make smarter, safer decisions about technology.

 A frequent speaker and instructor at national IT events, Randy has advised thousands of organizations, from startups and SMBs to large enterprises and U.S. government entities, on secure, practical technology adoption. He writes about the decisions business leaders are often expected to make without enough context, including cybersecurity, compliance, AI, cyber insurance, IT strategy, and business resilience.

 Outside the office, you’ll often find Randy on Lake Erie enjoying time on his 38-foot Chris-Craft.

**Writes about:** Cybersecurity strategy, compliance, AI security, business resilience, cyber insurance, SMB risk, IT leadership

[More From This Author →](https://blog.securafy.com/author/randyhall)

Related Articles

Business Continuity [Compliance Risk Assessment: How Downtime Impacts Your Bottom Line](https://blog.securafy.com/compliance-risk-assessment-how-downtime-impacts-your-bottom-line)

When systems go down, compliance obligations don't pause—and the financial consequences ...

Jul 28, 2026

Compliance [HIPAA Security Rule Changes Are Delayed To 2027: Why Healthcare Organizations Should Not Wait](https://blog.securafy.com/hipaa-security-rule-changes-are-delayed-to-2027-why-healthcare-organizations-should-not-wait)

The updated HIPAA Security Rule won't take effect until 2027, but healthcare ...

Jul 23, 2026

Compliance [Multi Factor Authentication Best Practices for CJIS Security Policy Compliance](https://blog.securafy.com/multi-factor-authentication-best-practices-for-cjis-security-policy-compliance)

Law enforcement agencies and criminal justice organizations face mounting pressure to ...

Jul 16, 2026

Compliance [CMMC Phase II Has Been Suspended: What Defense Contractors Still Need To Do](https://blog.securafy.com/cmmc-phase-ii-has-been-suspended-what-defense-contractors-still-need-to-do)

The Department of Defense suspended CMMC Phase II enforcement, but that doesn't mean ...

Jul 15, 2026

IT Operations [Cybersecurity For Veterinary Clinics: Protecting Client Data, Payment Systems, And Practice Operations](https://blog.securafy.com/cybersecurity-for-veterinary-clinics-protecting-client-data-payment-systems-and-practice-operations)

Veterinary clinics handle sensitive client data, payment information, and critical ...

Jul 9, 2026

IT Operations [AT&T Cybersecurity, AlienVault USM, And Managed Security: What SMBs Still Need To Own](https://blog.securafy.com/att-cybersecurity-alienvault-usm-and-managed-security-what-smbs-still-need-to-own)

Managed security platforms like AT&T Cybersecurity and AlienVault USM provide ...

Jul 8, 2026

Get Practical Cybersecurity Field Notes

Monthly cybersecurity, compliance, and IT strategy updates from Securafy, written for business owners who need clear next steps.

- Practical security tips from our Cyber Security Drip series
- The Securafy Times, our monthly roundup on compliance and IT strategy
- Occasional updates on new tools, guides, and research
- No spam — unsubscribe anytime

NIST CSF 2.0 Zero Trust Application Control CISA Aligned Enterprise Partner

© 2026 Securafy — Columbus & Cleveland, Ohio

[Main Site](https://www.securafy.com/) [Blog Home](https://blog.securafy.com/) [Contact](https://www.securafy.com/contact.html) [Privacy Policy](https://www.securafy.com/privacy-policy.html)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Randy Hall",
    "url" : "https://blog.securafy.com/author/randyhall"
  },
  "dateModified" : "2024-07-24T20:13:55.759Z",
  "datePublished" : "2023-02-14T16:00:00.000Z",
  "headline" : "Prilex Malware Blocks Contactless Payments to Steal Credit Card Information",
  "mainEntityOfPage" : {
    "@id" : "https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://blog.securafy.com/hubfs/securafy-logo.png"
    },
    "name" : "Securafy Inc."
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securafy.com/#organization",
  "@type" : "Organization",
  "address" : [ {
    "@type" : "PostalAddress",
    "addressLocality" : "Columbus",
    "addressRegion" : "OH",
    "postalCode" : "43219",
    "streetAddress" : "4449 Easton Way, Suite 200"
  }, {
    "@type" : "PostalAddress",
    "addressLocality" : "Independence",
    "addressRegion" : "OH",
    "postalCode" : "44131",
    "streetAddress" : "6100 Oak Tree Blvd, Suite 200"
  } ],
  "areaServed" : [ "Columbus OH", "Cleveland OH", "Ohio" ],
  "name" : "Securafy Inc.",
  "url" : "https://securafy.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://securafy.com/#website",
  "@type" : "WebSite",
  "inLanguage" : "en-US",
  "name" : "Securafy",
  "publisher" : {
    "@id" : "https://securafy.com/#organization"
  },
  "url" : "https://securafy.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://blog.securafy.com/#blog",
  "@type" : "Blog",
  "name" : "Securafy Knowledge Hub",
  "publisher" : {
    "@id" : "https://securafy.com/#organization"
  },
  "url" : "https://blog.securafy.com"
}
```

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information#article",
  "@type" : "Article",
  "author" : {
    "@id" : "https://www.securafy.com/about-us/#randyhall",
    "@type" : "Person",
    "name" : "Randy Hall"
  },
  "dateModified" : "2024-07-24T20:13:55+00:00",
  "datePublished" : "2023-02-14T16:00:00+00:00",
  "description" : "Prilex Malware Blocks Contactless Payments to Steal Credit Card Information",
  "headline" : "Prilex Malware Blocks Contactless Payments to Steal Credit Card Information",
  "image" : "https://www.securafy.com/hs-fs/hubfs/securafy-og-default.jpg",
  "inLanguage" : "en-US",
  "isPartOf" : {
    "@id" : "https://blog.securafy.com/#blog"
  },
  "mainEntityOfPage" : {
    "@id" : "https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@id" : "https://securafy.com/#organization"
  },
  "url" : "https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BreadcrumbList",
  "itemListElement" : [ {
    "@type" : "ListItem",
    "item" : "https://blog.securafy.com",
    "name" : "Knowledge Hub",
    "position" : 1
  }, {
    "@type" : "ListItem",
    "item" : "https://blog.securafy.com/2023/02/14/prilex-malware-blocks-contactless-payments-to-steal-credit-card-information",
    "name" : "Prilex Malware Blocks Contactless Payments to Steal Credit Card Information",
    "position" : 2
  } ]
}
```