Why two-factor authentication is not enough

How messages with confirmation codes from banks are intercepted and what can you do to protect yourself.