A Brazilian Banking Trojan: Ousaban Targeting Spanish and Portuguese Users
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal, using fake PDFs, geofencing, and a payload hidden inside an image to steal credentials without triggering security tools.
Fortinet’s FortiGuard Labs identified the campaign in May and published its analysis this week. The attack begins with phishing [...]
This story continues at The Next Web
As of 2026, the Ousaban trojan has not only expanded its reach to include Japan, but it has also begun leveraging advanced AI-driven techniques for more sophisticated phishing attacks. Researchers at Fortinet have observed the trojan using AI to generate highly realistic and personalized phishing emails, tailored to individual users' browsing histories and preferences. This new level of personalization significantly increases the likelihood of successful credential theft. Furthermore, with the rise of remote work, the trojan has adapted to target virtual private networks (VPNs), posing an additional layer of risk to corporate security. Read the full analysis from Fortinet’s FortiGuard Labs