Hacked bank server hosts phishing sites