Trojanized Android App Fuels New Wave of NFC Fraud (infosecurity-magazine.com)

• NGate malware disguises as HandyPay app in Brazil
• Steals NFC card data and PINs by intercepting communications
• Distributed via unofficial sources; prevention measures advised

"The NGate malware abuses the HandyPay app to steal NFC card data and PINs in Brazil. The trojanized application intercepts contactless payment communications and exfiltrates sensitive information to attackers. Users are advised to install apps only from official sources and disable NFC when not in use."