Several HSBC websites are subject to scripting flaws that create a possible mechanism for crooks to create more convincing phishing scams. Security blog xssed.com has posted a list of affected domains, which include HSBC sites in multiple territories including the UK. Xssed has been tracking problems on the bank’s sites since last year. The bank has been taking up to two months to fix problems, with issues pointed out to it in May still unresolved. Xssed came right out and said “Protect your customers’ privacy and security now! Leaving site-specific vulnerabilities open for days, weeks or months, can lead to substantial financial losses!”

Sadly, the main HSBC website at www.HSBC.com was vulnerable but the problem was fixed in 2007. That is the flagship HSBC website for the world. We — as well as HSBC — caution everyone to be careful, examining the validity of emails and calling for help if there exists any doubt about the security of your online transactions. HSBC is similar to eBay as programmers give new “improvements” to customers while breaking other areas that were once very functional. Maintaining websites for one of the largest banks in the world is difficult at best and we respect those behind the scenes. Just get the problems fixed if you will, and do so in a timely manner.

Popularity: 3% [?]

No related posts.