"Hearing" the same password twice drastically increases the accuracy, however, social engineering is indeed the most effective and efficient attack method.