Great article
Peter Todd publicly demonstrated this attack in 2016 to prove that unconfirmed transactions are fundamentally uncertain.
There are several theoretical attacks, such as sending the same transaction with a different sender to a mining pool at the same time.