Vishing
Social engineering on a phone call. They are not Microsoft, the ATO, or your bank's fraud team.
Vishing is voice phishing: a call (or voicemail) that impersonates a trusted organisation and pushes a payment, a remote-access session, or a one-time code. Related ACSC terms: impersonation scam and remote access scam.
Hang up. Call back on a number from a statement or the official site, not the one the caller recites. Nobody legitimate needs you to install a support tool or read out an MFA code.
Fact source: ASD's ACSC glossary.