The Ghost Tap attack used $XRP $BNB $SOL NFC payments to steal money

Threat Fabric researchers discovered the Ghost Tap attack, which allows cashing out funds from bank cards linked to a mobile payment system. In the first stage, attackers use malware to steal card data and intercept one-time passwords for registering a virtual wallet in Apple Pay or Google Pay.

Next, cybercriminals link the stolen card to their device and use a public tool called NFCGate to transmit NFC traffic to a vast network of money mules for cashing out at points of sale.

Thus, the main operators of malicious activity more effectively cover their tracks.