RSA Security has discovered a large-scale malware campaign, which hijacked Boleto payments causing an amount of financial losses for 3,75 USD billion losses. The malicious code implements the man-in-the-browser technique to exploit vulnerabilities in popular browsers, including Chrome, Firefox and Internet Explorer running on Windows machines. The security firm has detected 495,753 fraudulent transactions since 2012, a total amount of losses for $3.75 billion USD. The actual amount the fraudsters were able to redirect to their accounts and were actually paid by the victims is unknown.”]
Source: http://securityaffairs.co/wordpress/26359/cyber-crime/massive-boleto-fraud-brazil.html