@GossiTheDog well wouldn't be surprised if someone is just calling them pretending to be from their IT department and instructing them to grant them access.