Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

Summary

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is really in Spain or Portugal, and hides its real payload inside an image. The goal is the usual one: steal banking logins and take

Lotu Radar provides attributed news summaries and links to the original publisher. Full reporting and copyright remain with the source.