A phishing scam where unwary users are lured into filling out a bogus survey has been traced to a hacked web server of a state-owned Chinese bank.