New NGate virus can steal bank cards of Android smartphone owners

A new virus called NGate poses a threat to Android smartphone owners: it is capable of stealing money from bank cards linked to the device. This is warned by Bleeping Computer.

NGate uses an NFC chip to transmit data to attackers' devices. This allows hackers to emulate victims' cards and make unauthorized payments without physical access to the cards. Attackers can also use this technology to withdraw money from ATMs that support contactless payments.

According to ESET experts, attacks using NGate began in November 2023. The malware uses methods to bypass iOS and Android security through PWA (Progressive Web Apps) and WebAPK. ​​Attacks usually start with text messages, voice calls, or malicious ads, after which a PWA or WebAPK is installed on the victim's device.

Once in the system, NGate activates the NFCGate component, which was originally created for NFC testing. NFCGate supports data capture, retransmission, playback, and cloning, which NGate uses to obtain information from bank cards and transmit it to attackers.