Cybercriminals weaponize a popular NFC payment tool, exposing Android users to stealthy card data theft.