Signal
Ousaban banking trojan targets bank users in Spain and Portugal with phishing PDFs
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-07-01 13:45 UTCUpdated 2026-07-01 23:11 UTC
rss
cveexploitsmalwarethreat_actorsincident_response
Trend in the last 24h
Current brief openSource links open
This current signal is open on the public brief with summary, metadata, source links, and full evidence. Pro adds compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
The Brazilian Ousaban banking trojan has been identified targeting Windows users in Spain and Portugal. The campaign uses phishing PDFs disguised as corrupted files that prompt victims to click an update button.
Entities
FortinetOusaban
Score total
1.22
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- The campaign was identified recently in May 2026, indicating an active threat.
- New stealth methods in Ousaban's delivery increase its effectiveness against current defenses.
- Awareness can help banks and users in Spain and Portugal strengthen protections promptly.
Why it matters
- Ousaban uses sophisticated stealth techniques to evade detection, increasing risk to Iberian banking users.
- Phishing PDFs disguised as corrupted files exploit user trust to deliver malware payloads.
- Geographic targeting limits impact but raises concerns for regional financial cybersecurity.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- Ousaban banking trojan targets Spain and Portugal with phishing PDFs disguised as corrupted files.
How sources frame it
- Fortinet FortiGuard Labs: neutral
All evidence
All evidence
The Hacker News
thehackernews.com · thehackernews.com · 2026-07-01 15:26 UTC
Ousaban banking trojan targets Spain and Portugal with new stealth techniques
SC Media · scworld.com · 2026-07-01 23:11 UTC
Brazilian Banking Trojan Ousaban Targets Spain and Portugal
Infosecurity Magazine · infosecurity-magazine.com · 2026-07-01 13:45 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
- thehackernews.com (1)
- SC Media (1)
- Infosecurity Magazine (1)
Top origin domains (this list)
- thehackernews.com (1)
- scworld.com (1)
- infosecurity-magazine.com (1)