Hackers are increasingly deploying a devious type of malware designed to drain Android users’ bank accounts.
This malware, called NGate, captures wireless NFC data from victims’ payment cards through their Android phones.
Initially targeting Czech banks, the malware has now expanded its reach to Poland, reports the region’s Computer Emergency Response Team, CERT Polska.
Criminals deliver NGate via phishing emails, SMS or fake bank calls urging app installation.
Once installed, malicious apps containing the malware prompt users to verify their payment cards by tapping them to the phone and entering PINs on a custom keyboard.
The software then captures and sends the info over the internet, allowing bad actors to use the data to initiate ATM withdrawals.
CERT says users should download apps only from official stores, and verify suspicious calls by hanging up and redialing official numbers.
Follow us on X, Facebook and TelegramGenerated Image: Midjourney