Well known banks have created an infestation of application bugs and vulnerabilities across the Internet, allowing fraudsters to insert their data collection forms into bona fide banking sites, creating convincing frauds that are undetectable to most customers. Indeed, a personal finance journalist writing for The Motley Fool was brave enough to publicly admit to having fallen for a fraud running on Suntrust's site and having her current account cleaned out. It's a reasonable premise that if a Motley Fool journalist can fall for a fraud, anyone can.
The script being exploited allows visitors to search for Citizens Bank branch offices in their town. Along with search scripts, branch locator pages are frequently carelessly coded and are targets for fraudsters who are actively analyzing financial web sites for weaknesses.
The successful script injection attack on Citizens Bank follows similar attacks against Visa, Mastercard, and SunTrust in December.
Netcraft additionally provides a range of services for banks and other financial institutions to eliminate these kinds of errors from their systems, including comprehensive application testing and training for developers and designers of web based applications.