1 article on this topic.
An attacker convinces your mobile carrier to move your number to their device. Every SMS code you rely on is then theirs.