A finance department employee receives a phone call from someone claiming to be the company's IT help desk. The caller states that a security patch failed on the employee's workstation and urgently requests the employee's network credentials to 're-apply the update before the account is locked out.' No such patch activity is recorded in the IT ticketing system, and the caller's number is spoofed to resemble an internal extension. Which type of attack is being attempted?