NFC Traffic Stealer Targets Android Users & Their Banking Info

ESET researchers uncovered NGate, an Android malware derived from the legitimate NFCGate tool that phishes users for banking credentials, captures NFC payment-card data when victims place cards near their phones, and relays that data to an attacker's Android device (which must be rooted) to clone cards and perform fraudulent NFC transactions and ATM withdrawals; the campaign is distributed via SMS phishing and social-engineering calls and has been observed in the wild in Czechia.