Analysis of NGate malware campaign (NFC relay) | CERT Polska

A sophisticated Android malware campaign dubbed NGate leverages social engineering to trick Polish banking customers into installing a malicious app that captures payment card NFC data and PINs, enabling attackers to relay this information in real time to withdraw cash from ATMs using victims’ own cards.