An attacker impersonating a bank employee calls a user in an attempt to gain access to their account. What type of attack was used in this scenario?