pull down to refresh
I think with enough information, someone could pull this off. With some public information that seems private, like a store ID that usually only managers care about, you could fake legitimacy. Combined with being there to help (which isn’t wrong), I think the employees or shift manager would trust enough to let the social engineer try.
The excuse for not knowing what they’re doing could be, “Oh, that’s an old version of our interface.”
reply
This is a very good idea. I'm not brave enough, though.