Gallery
Browser address bar of Fubon bank site via proxy hi-res
Browser address bar of Fubon bank site direct hi-resFirst published: 24th June 2014
The Hong Kong Management Authority (HKMA) has issued a warning about the domain p.uberthepyro.com that can be used as a proxy to any website. HKMA specifically warn that three banks (Chong Hing Bank Limited, Fubon Bank (Hong Kong) Limited and Public Bank (Hong Kong) Limited) have reported that their websites can be accessed via the proxy domain. The case has been referred to the Police for investigation.
The report did not mention any attempts to use the proxy domain fraudulently, for example, by distributing links to proxied bank websites by email.
Yui Kee Chief Consultant Allan Dyer commented, "This domain can be used to access many websites, for example the HK Government portal: http://www.gov.hk.p.uberthepyro.com/en/residents/. While it is possible it was set up for fraudulent purposes, it seems more likely that it was intended as a private web-proxy, and the public access was unintended."
The HKMA advised, "bank customers are reminded to always connect to a bank website by typing the authentic website address in the browser or by bookmarking the genuine website for subsequent access, rather than through this suspicious website".
Dyer advised, "It is important to understand the security features of your browser. Modern browsers try to inform you which site you are using by highlighting the domain name. If the normal domain name of your bank is not highlighted, then you should be warned, and not enter sensitive information." For example, compare the browser address bar of the Fubon Bank via this proxy: and direct: .
Dyer continued, "For bank transactions, or any other sensitive information, you should be using an encrypted connection, which can also verify the identity of the site. Firefox uses a blue or green bar next to the address to indicate a verified connection, as illustrated in our article on Purchase Order Phishing this month".
Anyone who has provided his or her personal information to the website or has conducted any financial transactions through the website should contact the bank concerned and any local Police Station or the Commercial Crime Bureau of the Hong Kong Police Force at 2860 5012.
