No zero-days. No sophisticated malware. Just a phone call, a convincing voice, and a support employee who trusted the person …

source