TTPwire Vol. 1 · MITRE ATT&CK·Tagged

← All stories

Infosecurity Magazine

Trojanized Android App Fuels New Wave of NFC Fraud

2026-04-21 · Read original ↗

ATT&CK techniques detected

2 predictions
T1056Input Capture
62%
"findings align with a broader trend in which threat actors use large language models ( llms ) to accelerate malware development. the campaign also reflects a shift in nfc - based fraud techniques. earlier ngate variants relied on open - source tools such as nfcgate, but newer ope…"
T1204User Execution
35%
"findings align with a broader trend in which threat actors use large language models ( llms ) to accelerate malware development. the campaign also reflects a shift in nfc - based fraud techniques. earlier ngate variants relied on open - source tools such as nfcgate, but newer ope…"

Summary

NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil