NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs
A new version of the Android malware family known as NGate has been detected by cybersecurity experts to exploit HandyPay, a legal application, rather than NFCGate.
According to a report shared with The Hacker News by ESET security researcher Lukě Štefanko, the threat actors stole the software, which is used to transmit NFC data, and patched it with malicious code that seems to have been created by artificial intelligence.
The malicious code enables the attackers to move NFC data from the victim's payment card to their own device and use it for contactless ATM cash-outs and illicit payments, just like in earlier versions of NGate.
Furthermore, the malicious payload has the ability to obtain the victim's credit card PIN and transfer it to the command-and-control (C2) server of th...