@basewtf
Workday got hacked like this…they create a way for you to give them your 2FA so they can log in. It’s getting very sophisticated.
My #1 tell…they called you as Apple. If you didn’t sign up for a call back then you hang up and call an official Apple # (they will actually show up as Apple Support on your iPhone too).
Never take an unexpected call and believe it’s who they say they are. HANG UP then take a breathe and evaluate if it’s real or not. Call the official number (Apple, Bank, Wireless carrier) if you want to check with them directly.