Documented cases and incidents involving Twitter.
Attackers phoned Twitter employees posing as IT help desk, harvested VPN credentials.