> It also seems from the article that the thieves were able to log in to the accounts with just a password and only needed the SMS to sign transactions. This "

> It also seems from the article that the thieves were able to log in to the accounts with just a password and only needed the SMS to sign transactions. This "feature" was enabled by default for my Danish online bank as well. I've since disabled it.