Threat actorN/ATracked since 2026-04

NGate Operator

Also known as:HandyPay trojanizer

As of 2026-05-30, NGate Operator is a N/A-nexus threat actor tracked by Threadlinqs Intelligence across 1 threat spanning malware. Also known as HandyPay trojanizer.

Tracked threats: 11 high
First seen: 2026-042026-04-22
Last seen: 2026-042026-04-22
ATT&CK techniques: —No mapped techniques yet
Related CVEs: 0None referenced
Attribution: N/ANation or origin

Nation: N/A · 1 tracked threat(s) · Categories: MALWARE

Activity timeline

NGate Operator appears in 1 tracked threat between 2026-04-22 and 2026-04-22.

Tracked threats

NGate Android NFC Relay Malware Variant - Trojanized HandyPay Banking App Campaign Targeting Brazil (2025-2026)HIGH2026-04-22