New Banking Trojan Hacks The FAQ To Fool Users

**Executive summary:** The report details a Ramnit banking malware variant that performs Man-in-the-Browser HTML injection to alter a bank's FAQ and prompt victims to register a falsified "service phone number," tricking users into entering OTPs and thereby authorizing fraudulent transfers to money-mule accounts; Trusteer documents this targeted, sophisticated attack against a UK bank.