﻿ HSBC sites vulnerable to XSS flaws, could aid phishing attacks
| ZDNet  HSBC sites vulnerable to XSS flaws, could aid phishing
attacks  Summary: What would the perfect phishing attack from a
social engineering perspective? The one that compared to using
typosquatted domains impersonating the bank's web application
directory structure is in fact using the bank's legitimate
domain names as redirectors due to XSS flaws within.  XSS flaw
HSBCWhat would the perfect phishing attack from a social
engineering perspective? The one that compared to using
typosquatted domains impersonating the bank's web application
directory structure is in fact using the bank's legitimate
domain names as redirectors due to XSS flaws within. It's even
more interesting to measure the average time it takes for a bank
to fix the XSS flaws within its sites upon getting notified of
them, which in some cases is longer than the average time it
takes to shut down a phishing site.  In yet another compilation
of XSS vulnerable sites courtesy o