The Cybersecurity Incident Coordination Center urges caution against phishing attacks exploiting the HSBC HK service disruption incident

HSBC's mobile application "HSBC HK" experienced service interruptions today, with some users unable to log in. The Hong Kong Cybersecurity Incident Coordination Centre (HKCERT) reminds users that such situations may be exploited by scammers impersonating technical support personnel or spoofing HSBC's official website to conduct phishing attacks, tricking users into providing sensitive information, installing malware, or making unauthorized transactions.

The centre advises users to directly enter the official website or use saved bookmarks to access online platforms, and to avoid clicking on links from unknown emails, messages, or social media. It also recommends enabling the browser's anti-phishing features to help block phishing attacks. Users should not call unknown phone numbers, share personal information or device access permissions with strangers, and should verify the identity of callers, contacting the bank only through official channels. Additionally, users should enable multi-factor authentication (MFA) for online banking, email, and important accounts