Mobile Malware Advisory for iOS users 5 Mar 2024 - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of the Mobile Malware Advisory for iOS users.
Beware of scammers specifically targeting Apple iPhone and iPad users using mobile malware. This malware is designed to collect sensitive information (e.g. facial recognition data, identity documents etc) and intercept SMS messages. Scammers make use of this facial data, combined with ID documents and the ability to intercept SMS, to gain unauthorized access to the victim’s banking account.
The scammers distribute this malware via TestFlight, Apple’s mobile application testing platform, or social engineer potential victims to install a Mobile Device Management Profile (MDM) which would allow the scammer complete control over the victim’s device and access to the victim’s banking account for unauthorized banking transactions.
If you suspect that your device is infected by malware, do this immediately:
Turn on airplane mode on your phone or turn off your phone. Call DBS immediately so we may help you. Check and remove any suspicious MDM profiles by going to Settings > General > VPN & Device Management. Verify that apps only have permissions that they should. To Protect Yourself:
Only download mobile apps from official app stores like Google Play Store and Apple App Store.
Official app stores have security measures to minimize your risk of installing a malicious app. However, always check the reviews and ratings of apps to ensure their trustworthiness. Never sideload apps from third-party websites, emails, SMSes, or social media. Be wary of MDM profiles and TestFlight application installations from unknown parties. Pay attention to the permissions an app asks for and use a reputable mobile security software.
Think twice if an app requests accessibility permissions, full control over your device, or access to sensitive information like SMS and emails. These requests are often red flags for malicious activities. Consider using reputable mobile security software to detect and block any malicious apps or alert you to potential risks. If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited 星展銀行(香港)有限公司 5 March 2024
Alert: Fraudulent Websites 8 Feb 2024 (Updated on 9 Feb 2024) - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of the following fraudulent websites, which purport to be DBS Digibank login webpages and prize-winning registration pages:
www[.]kampanjasuomi[.]com/x/ www[.]kampanjaspankkifionline[.]com/x/ www[.]ocbcc-sg-bankiingsg[.]com/x/ www[.]sg-pr2024[.]shop/login www[.]mobiili-spankkii-fiinland[.]com/x/ www[.]internett-bankiing-dbsssg[.]com/x/ www[.]sginternett-dbssg-bankiing[.]com/x/m/index.php/ www[.]sginternett-dbssg-bankiing[.]com/x/index.php/ Public should be aware of these fraudulent websites. Please find sample screenshots as below. Please note that the official website of DBS in Hong Kong is www.dbs.com.hk . The bank has no connection to the fraudulent websites. We have reported the matter to the Hong Kong Monetary Authority.
If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited星展銀行(香港)有限公司 8 February 2024 (Updated on 9 February 2024)
Alert: Fraudulent Email 3 Feb 2024 - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of fraudulent emails sent from an email address with domain "@dbshnkg[.]com”, which claims to be from the staff of the Bank.
Please note that the bank has no connection to the fraudulent emails. We have reported the matter to the Hong Kong Monetary Authority.
If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited 星展銀行(香港)有限公司 3 February 2024
SMS Sender Registration Scheme VIDEO
To help members of the public verify the identities of SMS senders, the Office of the Communications Authority, the Hong Kong Monetary Authority, the Hong Kong Police Force, the Hong Kong Association of Banks and the telecommunications industry have established the SMS Sender Registration Scheme. Starting from 28 Jan 2024, major banks in Hong Kong will only use Registered SMS Sender IDs with the prefix “#” to send one-way SMS to local mobile users.
With effect from 28 Jan 2024, the sender address of one-way SMS sent by DBS will be replaced by four Registered SMS Sender IDs #DBSHK , #DBS-HK , #DBS.HK and #DBS_HK .
Please note that the SMS Sender Registration Scheme is not applicable to:
SMS messages of which receiving parties are expected to reply to the senders via phone numbers; or Local subscribers of Single-Card-Multiple-Numbers/One-Card-Two-Numbers mobile service provided by non-Hong Kong operators. Please stay highly vigilant when receiving SMS with sender ID not having the prefix "#", especially when such SMS is sent from an unknown sender. Under all circumstances, you must not disclose to unidentified senders any personal information, bank account numbers or credit card details, transfer money or access any hyperlink in the SMS, to avoid suffering any loss.
For other information about the SMS Sender Registration Scheme, please visit the Office of the Communication Authority’s website (www.ofca.gov.hk/ssrs ).
DBS Bank (Hong Kong) Limited 星展銀行(香港)有限公司 26 January 2024 (Updated on 19 February 2024)
Alert: Fraudulent Website 26 Jan 2024 - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of a phishing website “ internett[.]ofer-banking-dbssg[.]com” purporting to be DBS Digibank login webpage. Public should also be aware of this suspicious website.
Please note that the official website of DBS in Hong Kong is www.dbs.com.hk . The bank has no connection to the fraudulent website. We have reported the matter to the Hong Kong Monetary Authority.
If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited星展銀行(香港)有限公司 26 January 2024
Alert: Fraudulent Facebook Page and Fraudulent Website 25 Jan 2024 - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of the following fraudulent DBS COMPASS VISA Facebook page:
www[.]facebook[.]com/congratulation.winner.806994 This fraudulent Facebook page lure readers into clicking on the following suspicious link, which will be redirected to a fraudulent DBS website for prize-winning registration:
compass-visa[.]myfreesites[.]net Public should also be aware of these fraudulent Facebook page and website.
Please note that the official DBS COMPASS VISA Facebook page is certified by Facebook with the blue verified badge. The official website of DBS in Hong Kong is www.dbs.com.hk . The bank has no connection to these fraudulent Facebook page and website. We have reported the matter to the Hong Kong Monetary Authority.
If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited 星展銀行(香港)有限公司 25 January 2024
Alert: Fraudulent Website 5 Jan 2024 - DBS Bank (Hong Kong) Limited (“The Bank”) would like to alert our customers and the public of a phishing website “internet-banking[.]hkdbsib[.]com” consisting of fraudulent DBS iBanking login page. Public should be aware of this fraudulent website.
Please note that the official website of DBS in Hong Kong is www.dbs.com.hk . The bank has no connection to the fraudulent website. We have reported the matter to the Hong Kong Monetary Authority.
If customers are concerned that they may have disclosed their personal information or have conducted any transactions through such channel, they should immediately contact the Police and DBS Bank (Hong Kong) Limited’s bogus calls enquiry hotline at (852) 2290 8345.
DBS Bank (Hong Kong) Limited 星展銀行(香港)有限公司 5 January 2024