TLDR: Two zero days. Complex social engineering including spoofed university emails and identities. Not a lot of detail.