If you see the current banner campaign on SMH and a Commbank banner comes up you will notice a request to fill in your banking login details pops up over the screen. I almost filled in mine!
If I were the media agency for Commbank’s online marketing I would be expecting to look for a new financial services client. The creative agency sends the banners to the media agency. The media agency is the last person with them and therefore should take responsibility because they put them live.