Tag: phantomcard

2 Attack Reports | 0 Vulnerabilities

Attack reports

New NGate variant hides in a trojanized NFC payment app

ESET researchers have identified a new NGate malware variant targeting Android users in Brazil since November 2025. The threat actors trojanized the legitimate HandyPay NFC payment application, likely using AI-generated code, to relay NFC data from victims' payment cards to attacker-controlled devi…
ngate
phantomcard
nfc relay
ai-generated code
2026-04-21
brazil targeting
fake lottery
handypay trojanization
payment card fraud
pin theft
Published: April 21, 2026
Downloadable IOCs: 6

PhantomCard: New NFC-driven Android malware emerging in Brazil

A new Android Trojan called PhantomCard is targeting banking customers in Brazil, with potential for global expansion. The malware relays NFC data from victims' banking cards to fraudsters' devices, enabling unauthorized transactions. Distributed through fake 'Google Play' pages as a 'card protecti…
malware-as-a-service
brazil
banking fraud
2025-08-14
btmob
phantomcard
ghostspy
card protection
android trojan
nfc relay
Published: August 14, 2025
Downloadable IOCs: 2
Click here to see more Attack Reports