IBM recently came across a complex new criminal scheme involving the Tatanga Trojan. The scam targets the online banking customers of several German banks. By combining an MitB attack with social engineering, Tatanga is able to circumvent most banks mobile security and out-of-band authentication. It then goes one step further by hiding evidence of the fraudulent transaction from the victim using a post-transaction attack mechanism. Fortunately, the text in the injected HTML page with grammar and spelling mistakes appears not to have been written by a German hacker.”]