In 2016 MELANI wrote in a newsletter that criminals target authentification methods of e-banking applications. Now attackers try to trick users into handing them over activation letters for the 2FA authentification.
For details see the german version of this post or the MELANI website.