[chucky123]

It's more like gaining backdoor access to the bank's server.

At this stage no attack has happened(but can happen)

[shprd]

They didn't gain access anywhere, it's their platform.

[immibis]

If the bank starts fiddling with the numbers in your account: "I'm not being attacked, it's their database"