Image by Mohamed Hassan, from Stock Vault
New Android Malware Targets Contactless Payment Data
- Written by Kiara Fabbri Former Tech News Writer
Cybersecurity experts have discovered a new Android malware named “NGate” capable of stealing contactless payment data from physical credit and debit cards, as reported yesterday by Android Headlines (AH).
Analysts explain that NGate tricks users into installing a malicious app disguised as a legitimate one. Once installed, the app can capture NFC data from the victim’s physical payment card and relay it to an attacker-controlled device. This allows attackers to clone the card and withdraw funds from ATMs.
The Hacker News reports that the malware has been observed targeting financial institutions in Czechia, but it could potentially target users in other regions as well. The malware is believed to be spread through phishing attacks, where victims are sent messages or links that appear to be from legitimate sources.
The attackers’ approach includes phishing websites, fake banking apps, and even direct phone calls to deceive victims. Once the malicious app is installed, it can steal the victim’s payment card data without their knowledge.
This malware, rooted in a legitimate NFCGate tool , was originally software intended for security purposes but was then repurposed for malicious activities. This software has been active since November 2023 and has evolved through social engineering tactics.
Google has confirmed that NGate is not found on any apps on the Google Play Store. However, the malware can still be distributed through third-party distributors.
These findings, along with recent research identify a critical flaw in digital wallet security: stolen card details remain usable even after a stolen or lost card is replaced.
To protect from NGate and other similar threats, users should be cautious about downloading apps from unfamiliar sources and avoid clicking on suspicious links or opening attachments from unknown senders.
Image by The Presidential Press and Information Office, from Wikimedia Commons
North Korea Unveils Suicide Drones In Test Overseen By Kim Jong Un
- Written by Kiara Fabbri Former Tech News Writer
- Fact-Checked by Justyn Newman Former Lead Cybersecurity Editor
Kim Jong Un, North Korean leader, oversaw a recent performance test of newly developed drones, as reported by state media on KCNA Watch reported Monday.
The test, conducted by the Drone Institute under the Academy of Defence Sciences on August 24, aimed to evaluate the capabilities of these drones for military use, KCNA said.
The test involved drones designed for various military purposes, including ground and sea attacks. The drones were flown along pre-set routes, demonstrating their effectiveness in combat scenarios.
Kim Jong Un reportedly emphasized the need for diverse drone capabilities, including suicide drones for infantry and special operations, strategic reconnaissance drones, and multi-purpose attack drones.
Photos released by KCNA show pixelated white suicide attack drones striking and destroying mock targets resembling a South Korean K-2 tank. This marks the first time North Korea has revealed images of these types of weapons, as the North Korea Times pointed out.
KCNA stated that Kim urged the continued development of underwater weapons, such as nuclear torpedoes and unmanned underwater attack vehicles. He also called for the use of artificial intelligence in advancing drone technology and outlined the steps needed to achieve these goals.
Aljazeera reports that Pyongyang has increased its tactical warfare capabilities, focusing on short-range missiles and heavy artillery targeting South Korea, following significant progress in its long-range ballistic missile and nuclear programs, despite international sanctions.
The AP notes that the drone test occurred concurrently with the Ulchi Freedom Shield drills , a large-scale exercise being conducted by the United States and South Korean militaries. The drills will continue until Thursday.
The exercises, aimed at improving readiness against North Korean threats, include computer-simulated war games, live-fire training, and a three-day combined aerial drill involving 60 warplanes that began on Monday, AP said.
