First published: 05th March 2014
A website, "www.samstyle.tk" that could be used as a proxy for connecting to bank websites has been shut down. Chong Hing Bank Limited ("CHB") noted that its website could be accessed with the URLs "http://www.samstyle.tk/index.pl/00/http/www.chbank.com/tc/personal/index.shtml" and "http://www.samstyle.tk/index.pl/00/http/www.chbank.com/en/personal/index.shtml" and alerted the Hong Kong Monetary Authority (HKMA) and the Police on 03 March 2014. The HKMA also received a similar report from Fubon Bank (Hong Kong) Limited, about the URL http://www.samstyle.tk/index.pl/00/http/www.fubonbank.com.hk
At the time of writing, the site is inaccessible and DNS and Whois records have been removed. A Google search suggests that the proxy could have been used to access any website, including a YouTube video, so this might have been setup for another purpose, and used for banking sites without the owner's knowledge or permission. However, it would be extremely unwise to connect to a banking website through a proxy, as the proxy could capture the login credentials for misuse. Users are advised to connect to bank, and other sensitive websites, directly by typing in the address in their browser, to use an encrypted connection (https:), to check the SSL certificate and to report suspicious websites or emails.
The Police are investigating, anyone who has used the proxy for sensitive information or financial transactions should contact the bank concerned and any local Police Station or the Commercial Crime Bureau of the Hong Kong Police Force at 2860 5012.