Grandoreiro campaign impersonates Spanish Agencia Tributaria

Operators behind the Grandoreiro banking trojan, which is popular in Latin America, have been using emails posing as the Agencia Tributaria to trick victims into installing the malware.