Trojan horse program can add data entry fields to legitimate online banking sites. Limbo integrates itself into a Web browser using a technique called HTML injection. The malware, Limbo, costs about $350 (U.S.), down from about $1,000 a year ago and $5,000 two years ago, an analyst says. Some fraudsters are taking a software-as-a-service approach, selling malware, access to botnets and everything else a person needs to become a harvester of data on unsuspecting consumers.”]
Source: https://www.csoonline.com/article/2123208/limbo-malware-grabs-personal-banking-data.html