New NGate variant hides in a trojanized NFC payment app

Reported 21 Apr 2026 by otx · Severity: medium

ESET researchers have identified a new NGate malware variant targeting Android users in Brazil since November 2025. The threat actors trojanized the legitimate HandyPay NFC payment application, likely using AI-generated code, to relay NFC data from victims' payment cards to attac