I take it all back

After saying that that I hadn't heard of any phishing for German online banking passwords, I've now come across three in the past two weeks. The latest involves the Postbank, and gets around PIN/TAN authentication by asking for a TAN directly on the fake login page. I assume the "login" is never successful to make you keep entering new TANs. They copied the layout pretty exactly, even the commented CVS information is in the source. If you're curious look at postbanks dot info.