Re: He should be proud that of that guy
There's a really simple scam - call someone, get the asset ID.
A couple of weeks later, call. "Hi - this is the IT department. We need to run some upgrades remotely but before we go ahead, can I confirm the Asset ID on your computer? My records show XXX-111-XXX - is that correct?"
Instant plausibility - you're telling them what's on a label on the computer in front of them - you must be legit!
Now talk them through connecting to whatever domain you need to point them at to get malware onto their PC ...