Kind of scary but this is only proof of concept (meaning possible but not currently happening). Worth noting a max range of ~19m but verrrry slow transmission speed (but a username+ password+ bankname would be verrry little data to send).

http://www.engadget.com/2013/12/03/audio-malware/