Malware
NFSkate
- First Reported
- Nov 20, 2024
- Latest Reported
- Sep 9, 2025
Reported Context (3)
- While monitoring the NFSkate threat actor group activity, we came across a quite unique sample. RatOn Android Trojan Combines NFC Relay, Remote Control and Automated Transfers
- Our Mobile Threat Intelligence service is monitoring NFC-relay threats and tactics since the discovery of NFSkate (aka NGate) in March 2024. PhantomCard Android Trojan Relays Brazilian Users’ Bank Card Data Over NFC
- As a result, threat actors adopted the tactic that we reported in the private report for customers about NFSkate in April 2024 (also reported in August by ESET as NGate): using publicly available tool NFCGate they relay Ghost Tap Uses NFC Relays to Scale Fraudulent Cash-Outs
Malware (10)
Threat Actors (1)
MITRE ATT&CK (8)
Products (10)
Tools (3)
Industries (3)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.