I think the attacker asked him to read an SMS code.