This article is slightly long and slightly geeky, but worth reading in full if this is your thing. For those who find it eye-glazing, scroll down to the heading " Some Other Types of Social Engineering Attacks Against MFA" and read on from there.
Thanks for the link. Good info!! I gave you a rec - and one to the author over on LinkedIn.