Two separate attacks demonstrate how threat actors are finding new ways to compromise organizations by using the popular social engineering tactic.