The attacker used "vishing," a social engineering scam on the rise.

The illicit activities cost companies and consumers about $33 billion per year, according to Europol and Trend Micro.