Comment by ZoFreX

> Hopefully their mobile apps use HTTPS for everything too?

Well, HSBC's didn't: https://threatpost.com/banking-apps-found-vulnerable-to-mitm...