Ousaban, also known as Javali, is a Brazilian banking trojan targeting Windows users in Spain and Portugal. It uses phishing PDFs with fake corruption prompts, geofencing, and steganography to deliver its payload. The malware steals banking credentials, captures keystrokes and screenshots, and allows remote control. It is part of the Brazilian Tetrade group and shares code with Casbaneiro.