ಪೋಲಿಷ್ Researchers NFC Payments Hijack ಮಾಡೋ Advanced Android Malware Reveal ಮಾಡಿದ್ದಾರೆ!

By Balu Published on

Document Index Blocks

[Contextual In-Article Optimization Ad Slot - 336x280 Rectangular Engine]

NGate ಅಂತ call ಆಗೋ new Android malware, victimsನ bank accountsನಿಂದ cash withdraw ಮಾಡೋಕೆ Near-Field Communication (NFC) tech exploit ಮಾಡ್ತಿದೆ – physical cards steal ಮಾಡದೆ, ಬದಲಿಗೆ digital signals hijack ಮಾಡಿ! CERT Polska reveal ಮಾಡಿದ ಈ attack, classic social engineering + cutting-edge mobile exploitation combine ಮಾಡಿ real-time seamless ATM withdrawals enable ಮಾಡ್ತದೆ.

Scam ಸಂದೇಶದಿಂದ Start ಆಗುತ್ತದೆ

NGate campaign codeನಿಂದ ಅಲ್ಲ, conversationನಿಂದ begin ಆಗುತ್ತದೆ. Victimsಗೆ bank alerts pose ಮಾಡೋ convincing emails/texts ಬರುತ್ತವೆ – “security issues” ಅಥವಾ “account verification” ಅಂತ. Links “bank support” software disguiseನಲ್ಲಿ malicious Android app download ಮಾಡಿಸುವ websitesಗೆ lead ಮಾಡ್ತವೆ.Install ಆದ ಮೇಲೆ, app legit financial tool ಲಾಂತ work ಮಾಡ್ತದೆ – trusted institutionsನ look & feel mimic. Scammers follow-up phone callsನಲ್ಲಿ official reps pose ಮಾಡಿ trust build ಮಾಡ್ತಾರೆ, even SMSಗಳಲ್ಲಿ “employee IDs verify” ಅಂತ fake ಮಾಡ್ತಾರೆ.Real attack trigger ಆಗೋದು victimsಗೆ payment card phoneಗೆ tap ಮಾಡಿ “verify” ಅಂತ ಕೇಳಿದಾಗ. Behind the scenes, NGate silently card data intercept ಮಾಡಿ remote attacker-controlled serverಗೆ real-time relay ಮಾಡ್ತದೆ.

Technical Relay Inside

CERT Polska forensic analysis reveal: NGate Host Card Emulation (HCE) service ಆಗಿ register ಆಗ್ತದೆ – legit Android feature that phones virtual payment cards ಆಗಿ act ಮಾಡಲು allow ಮಾಡ್ತದೆ. Malware reader modeನಲ್ಲಿ run ಆಗಿ NFC signals (normally contactless card terminal ನಡುವೆ secure exchange) capture ಮಾಡ್ತದೆ.Captured details – PAN, expiry date, AIDs, even PIN – custom TCP channel ಮೂಲಕ C2 serverಗೆ forward. Analysts app config file decrypt ಮಾಡಿ C2 IP expose ಮಾಡಿದ್ದಾರೆ: 91.84.97.13:5653.Core functions libapp.so native libraryನಲ್ಲಿ – config decrypt & network init. Communication plain text, every 7 seconds “keep-alive” pings – forensic tracking easy, but real-time detection tough design choice.

Digital Theft → Physical Cash

Activate ಆದ ಮೇಲೆ, NGate criminalsಗೆ second device (as emitter) use ಮಾಡಿ captured NFC traffic replay ಮಾಡಲು allow ಮಾಡ್ತದೆ at ATM/PoS terminals. Victim phone reader ಆಗಿ credentials collect; attacker device card ಆಗಿ data replay.ಈ relay effectively clones payment identity – attacker physical swipe ಇಲ್ಲದೆ cash withdraw. CERT Polska confirm: architecture dual-mode (reader + emitter) support – end-to-end NFC relay attacks enable.Traditional online wallet-draining malwareಗಿಂತ different, NGate digital physical worlds bridge ಮಾಡ್ತದೆ. Smartphone ಅನ್ನು unwitting proxy for live financial theft ಆಗಿ convert – network-speed “contactless pickpocket”.

Local Innovation, Global Lessons

Campaign currently Polish bank users target ಮಾಡ್ತಿದೆ, but cybersecurity experts warn NGate framework other marketsಗೆ easily adapt ಆಗಬಹುದು – especially contactless payments global spread. Success software vuln exploit ಅಲ್ಲ, human trust manipulation ಮೇಲೆ depend – unverified apps install & routine instructions follow ಮಾಡಿಸೋಕೆ victims trick.CERT Polska advice:

Official app storesನಿಂದ ಮಾತ್ರ verified apps download.
Extra “verification tools” install ಕೇಳಿದ್ರೆ direct bank contact ಮಾಡಿ.

🗂 Previous Phase Context Node Evaluating Legacy Compilation Vectors and Hardware Overheads

Next Evolution Layer 🗂 Hyper-scaling Multi-tenant Isolation Kernels inside Enterprise Infrastructures

ಪೋಲಿಷ್ Researchers NFC Payments Hijack ಮಾಡೋ Advanced Android Malware Reveal ಮಾಡಿದ್ದಾರೆ!

Scam ಸಂದೇಶದಿಂದ Start ಆಗುತ್ತದೆ

Technical Relay Inside

Digital Theft → Physical Cash

Local Innovation, Global Lessons

讨论 Discussion Pipe Matrix

ಕಾಮೆಂಟ್‌ಗಳು

ಕಾಮೆಂಟ್‌‌ ಪೋಸ್ಟ್‌ ಮಾಡಿ