What NFC tag type is used for storing plain-text NDEF messages and what payload attack can be performed using a malicious NFC tag?
- A.A) NFC Forum Type 2 and Type 4 tags can store NDEF records including URI records; a malicious tag can embed a URI pointing to a drive-by download or phishing site, which some Android versions automatically open in a browser when the tag is tapped.
- B.B) Only NFC Type 1 tags support NDEF; malicious tags can inject Bluetooth pairing commands to pair a rogue headset.
- C.C) NFC tags cannot initiate browser actions; they can only exchange vCards, making payload attacks impossible.
- D.D) NFC tags use WPA3 encryption; without the correct passphrase a malicious payload cannot be read by the device.
Why A is correct