The threat was discovered by cybersecurity firm ESET, which highlighted the potential for damage, especially in contactless transactions.
The attack begins with a phishing message, thereby tricking the victim into singapore company email list downloading a malicious application that appears to be a security update or a legitimate banking application.
After installation, the malware then activates a component called NFCGate, which captures data from cards near the infected device.
Criminals transmit this data to a server they control, allowing them to emulate the card on another Android device and make withdrawals at ATMs and payments at points of sale.
NGate malware steals card data using NFC on Android
Vulnerable devices and signs of infection
Android devices that keep NFC enabled all the time or that allow the installation of apps from unknown sources are the most vulnerable.
Therefore, signs of infection include unexpected requests to activate NFC and enter sensitive information, such as your card PIN. If you notice anything suspicious, it’s crucial to act quickly to protect your financial data.
How to protect yourself from the NGate virus
To protect yourself from this type of scam, experts recommend:
Disable NFC when not in use.
Avoid downloading apps outside the Google Play Store.
Use virtual cards protected by biometric authentication.
Keep security software on your device up to date.
What to do if you are a victim?
If you suspect you have been a victim of NGate, immediately disable NFC, change your banking passwords and, in addition, contact your bank to block the compromised card.