Android malware steals your card details and PIN to make instant ATM withdrawals

Malwarebytes and CERT Polska analyzed NGate, an Android banking trojan that infects victims via phishing and fake banking apps to capture NFC tap-to-pay transaction data (including one-time cryptograms and PINs) and immediately forward it to accomplices who emulate the card at ATMs to withdraw cash; the report describes the attack flow, social-engineering requirements, mitigation advice, and Malwarebytes detection names.