A new variant of the Citadel financial malware is targeting users of the Payza online payment platform by launching local in-browser attacks to steal their credentials. The new Citadel variant contains code that alters the form fields users are asked to fill in on Payza’s log-in page. Payza is a payment platform similar to PayPal, but with a strong focus on emerging markets. The company that owns Payza claims that the service is available in 197 countries and has over 9 million users. There are several security concerns with the use of online financial services like Payza in developing countries.”]

