Citadel malware variant uses content localization to target brands and users in different countries