First published: 27th April 2015
The Hong Kong Monetary Authority (HKMA) has issued a warning about a fraudulent website that mimics the website of Dah Sing Bank, Limited (DSB). The fraudulent site was hosted in Panama and still accessible at the time of writing. The domain was created on 5th April 2015.
The construction of the fake site is interesting. Most of the text 'links' are inactive, with the exception of the login link, and the links in the left sidebar. The image links lead to a variety of pages that harvest personal data, for example, the 'Online Bill Payment Lucky Draw' page wants your email address. Presumably, criminals are realising that not every hit on a bank homepage is followed by an online banking login, but people can be tempted to disclose additional information for later phishing attempts.
Victims should contact DSB at 2507 8000 and any local Police Station or the Cyber Security and Technology Crime Bureau of the Hong Kong Police Force at 2860 5012.