Russian police dismantle NFCGate malware ring, millions stolen

Russian police have dismantled a criminal group that stole millions from bank customers using malware built on NFCGate, a legitimate open-source tool increasingly exploited by cybercriminals worldwide, according to The Record.

The group, which allegedly stole over 200 million rubles (approximately $2.6 million), distributed a malicious mobile application through WhatsApp and Telegram, disguised as legitimate banking software. Victims were tricked into installing the app and then instructed to hold their bank cards to their smartphones and enter their PIN during a fake authorization process. This allowed attackers to harvest card credentials and remotely withdraw funds from ATMs across Russia. Police detained several suspects, including the developer and main administrator of the tool. NFCGate, designed to relay NFC data, is favored by criminals for its ability to emulate victim cards, with sophisticated variants appearing globally.

The escalating misuse of NFCGate highlights a growing trend of legitimate tools being weaponized for cybercrime. The full extent of the network behind this scheme is still under investigation, suggesting potential for further impact and the need for international cooperation to combat such cross-border financial fraud.

Source: The Record