Customizing your browser to hide often makes it easier to recognize.
Fortinet says the Ousaban trojan uses geofenced phishing PDFs and steganography to steal banking credentials from users in Spain and Portugal.