Ousaban Banking Trojan Targets Spanish and Portuguese Financial Institutions via Phishing Campaign (infosecurity-magazine.com)

• Ousaban trojan targets Spanish and Portuguese banking customers
• Phishing campaign uses geofencing, steganography, and sandbox evasion
• Stolen credentials from Santander, BBVA, CaixaBank, Revolut, and Caixa Geral de Depósitos

"FortiGuard Labs reports that the Brazilian banking trojan Ousaban has been targeting users in Spain and Portugal since May 2026. The phishing campaign uses PDFs, steganography, and geofencing to select victims and evade researchers. The trojan steals credentials from banks including Santander, BBVA, and CaixaBank."