➀ NGate malware uses NFC technology to steal payment card data from infected Android devices and relay it to attackers. ➁ The malware can emulate the stolen card, allowing attackers to withdraw money from ATMs or make payments. ➂ NGate was distributed through phishing attacks, masquerading as legitimate banking apps and prompting users to enter sensitive information.