Metro Bank has become the first major bank to disclose SS7 attacks against its customers, but experts believe it isn't an isolated case.