Crime doesn't pay? Crime doesn't do secure coding, either: Akamai bug-hunters find hijack hole in bank phishing kit

Absolutely criminal behavior - unrestricted file upload, really?

Exclusive Phishing kits - used by miscreants to build webpages that steal victims' personal information and money by masquerading as legit websites - harbor vulnerabilities that can be exploited by other miscreants to pilfer freshly stolen data."