The banker, aka Metamorfo, is roaring back after Spanish police arrested more than a dozen gang members.
https://threatpost.com/mekotio-banking-trojan-campaign/175981/
The old RLO trick of exploiting how Unicode handles script ordering and a related homoglyph attack can imperceptibly switch the real name of malware.
https://threatpost.com/trojan-source-invisible-bugs-source-code/175891/