How the banking Trojans circumvent two-factor authentication

Two-factor authentication involving SMS, while used by most banks for quite some time, is not unbeatable.