A little example of why two factor authentication is needed, and how simple a social engineering attack could be effective