Several banks in Canada have been hacked in a very similar way. The attack was carried out by email, which included a PDF attachment with the bank’s official logo, as well as an authorization code.

https://www.infosecurity-magazine.com/news/canadian-banks-spoofed-in-2year/