MORE than a thousand CommBank and ANZ customers may have unknowingly handed out their log-in details and credit card numbers after downloading malicious banking apps. A Google spokesman declined to say how many times the apps were downloaded or how they made it into the Google Play store. As the banks were impersonated, not hacked, the scam falls outside Australia’s new mandatory data-breach notification scheme passed into law earlier this year.
