Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is really in Spain or Portugal, and hides its...

EUVD-2017-14986

Malware in sbrugna...

Banco Santander Mexico SA Supermovil app for iOS Information Disclosure Vulnerability

Banco Santander Mexico SA Supermovil app for iOS is an iOS-based mobile application from Banco Santander Mexico SA with quick access to manage your bank account, manage balances, pay bills and send money. A security vulnerability exists in versions 3.5 through 3.7 of the Banco Santander Mexico SA...

CVE-2017-5911

The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5911

The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5911

The CVE-2017-5911 entry concerns the Banco Santander Mexico SA Supermovil iOS app (versions 3.5–3.7). Concrete details from connected documents show the root cause is failure to validate X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitiv...

CVE-2017-5911

The Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...