HSBC banking web site trojan

[John Wilson]

2009/8/15 Peter Tomlinson <pwt at iosis.co.uk>:
[snip]
>
> Nothing found - I have just logged in again (6 pm) to check, and so have
> sent them this message:
>
> "This morning (Saturday) at about 10.10, when trying to log in to Internet
> personal Banking, your site served me with a Trojan - which my Internet
> Security software trapped. I telephoned the customer service line, and by
> about 10.30 was told that you knew that you had a problem and would fix it
> within an hour. Indeed you did fix it, but WHERE IS THE WARNING ON THE SITE
> FOR CUSTOMERS, telling them that their system may have been compromised?
> Although you obviously expect us to be protected, I'm sure that you will be
> aware that not every customer is going to be protected, and thus some
> customers could have their personal information stolen by the Trojan."


They are claiming that it was a false positive from the AV software
http://community.zdnet.co.uk/blog/0,1000000567,10013471o-2000331777b,00.htm

John Wilson