[sgbuffett]

[size=11]Victims received unsolicited SMSes purporting to be from the bank, claiming there were issues with their banking accounts and they had to click on a link given in the message to resolve the issue.
The link led to fake bank websites and victims were asked to key in their Internet banking account login details.[/size]

Whole thing is very simple 

1. Victim receive messages to go to certain link to check their accounts.

2. When they click on link it is identical to OCBC site asking for account password and OTP.

3. With this 3 things the can go in and do transfers to other accounts.