Updated: 26th November 2014
The Hong Kong Monetary Authority (HKMA) has warned about a fraudulent webpage "http://cccmkc.hk/templates/rhuk_milkyway/.index.htm" that linked to "http://subzeroindonesia.com/includes/js/stocktenda/confirm/authetication.bin.htm". The website purported to be the official website of Scotiabank (Hong Kong) Limited (Scotiabank) but Scotiabank has clarified that it has no connection with the fraudulent website.
The police are investigating, victims should contact Scotiabank at 2861 4100 and any local Police Station or the Commercial Crime Bureau of the Hong Kong Police Force at 2860 5012.
At the time of writing, both pages were unavailable. The cccmkc.hk domain is registered to "The Christ of Church in China Mong Kok Church"sic and hosted in Hong Kong. The subzeroindonesia.com domain is hosted in Thailand. All organisations with an online presence should be aware that criminals will exploit weak security on any site in order to further their attempts to trick users of financial sites.