The malware builds on a near-field communication tool in combination with phishing and social engineering to steal cash.