Ghost Tap Attack, Hackers Stolen Credit Card Linked To Google Pay Or Apple Pay

Threat actors are exploiting a new cash-out tactic called “Ghost Tap” to siphon funds from stolen credit card details linked to mobile payment services like Google Pay or Apple Pay, which involves relaying NFC traffic, enabling unauthorized transactions without physical access to the victim’s device. 

By understanding this emerging threat, financial institutions can enhance their security measures to protect customer assets and mitigate the risks associated with this sophisticated cash-out technique.

Cybercriminals are leveraging NFCGate to relay NFC traffic between devices, enabling them to cash out funds from stolen cards linked to mobile payment systems like Apple Pay and Google Pay.

Maximizing Cybersecurity ROI: Expert Tips for SME & MSP Leaders – Attend Free Webinar

By exploiting vulnerabilities in these systems, attackers can obtain OTPs and link stolen cards to their devices, which allows them to make payments at offline retailers anonymously and at scale, bypassing traditional security measures and ...