New NGate Android malware uses NFC chip to steal credit card data

NGate is an active Android malware campaign (observed since November 2023) that uses malicious PWAs/WebAPKs to phish victims into installing a payload which embeds an open-source NFC relaying tool (NFCGate). The malware captures NFC payment-card data and relays it to attackers, who obtain PINs via social-engineering calls and can perform contactless payments, ATM withdrawals, or clone NFC access tokens; ESET’s research and a Czech police arrest confirm real-world exploitation, and users are advised to disable NFC or only install apps from official sources.