A new version of a banking trojan known as Mekotio is being deployed in the wild. The latest version uses a new, stealthier infection flow with at least two layers of obfuscation. Spanish is the language of choice for the phishing emails that start the infection chain. The trojan’s primary goal remains to steal people’s e-banking credentials and online account passwords. CheckPoint reports seeing approximately 100 attacks in the past three months deploying cipher substitution techniques to evade detection.”]