There was a malware campaign in Mexico that developed in late August 2018 featuring a financial information stealing trojan that also collects web page sign on information. Clam AV does not detect this, so I am releasing an MDB signature below for the two variants for ClamWin users there. Copy the 2 signatures in the ClamWin DB folder into a Notepad file named Sigfile.mdb or add it to an existing mdb file there. Do not save the file as a text file--save it as "All Files" using the Windows Explorer right click menu. You can keep the signature for 2-3 weeks because it will probably be outdated by new variants by then.

874496:22f2f6fb1608796f0ad3cc8d205e670e:Win.Trojan.Crypt-090518.0923
874496:f964d27a86dd0f8e06b2e88c9d35d803:Win.Trojan.Crypt-090518.0921

Regards,