This kind of social engineering phishing attack does not need any special skills nor is it very costly.
The only cost which attacker bears is that of sending the text messages to the victim.
Users can check the Password Recovery Scam video presented by Symantec security researchers:
Read More
source: www.techworm.net