Analysis of Ongoing Ousaban Attacks Targeting the Iberian Peninsula
Fortinet, Wednesday, July 1st, 2026
FortiGuard Labs details an ongoing Ousaban banking Trojan campaign targeting users in Spain and Portugal.
Fortinet's FortiGuard Labs analyzed an active banking Trojan campaign, dubbed Ousaban, targeting users across Spain and Portugal.
The attackers deliver the malware through phishing PDFs and malicious webpages. Ousaban uses geofencing and environmental checks to ensure only intended victims are infected, along with daily-changing domains to reach its command-and-control IP.
The report outlines the malware's evasion techniques and offers guidance for defenders.