Social Engineering
Social engineering is the use of psychological manipulation to trick people into divulging confidential information, granting access, or performing actions that compromise security.
Definition
Social engineering is the use of psychological manipulation to trick people into divulging confidential information, granting access, or performing actions that compromise security.
Overview
Unlike attacks that exploit technical vulnerabilities, social engineering exploits human trust, urgency, authority, and fear. Attackers research a target, craft a believable pretext, and manipulate a person — often an employee — into an action such as clicking a malicious link, revealing a password, or approving a fraudulent payment. Because it targets people rather than systems, social engineering can bypass even strong technical defenses. Common techniques include phishing (fraudulent emails or messages impersonating a trusted source), pretexting (fabricating a scenario to extract information, such as posing as IT support), baiting (leaving infected USB drives or offering fake downloads), and tailgating (physically following an authorized person into a secure area). Business email compromise, where an attacker impersonates an executive to authorize a wire transfer, is one of the costliest forms of social engineering seen by organizations. Because people are the weakest link in most security programs, awareness training, Multi-Factor Authentication (MFA) to blunt stolen credentials, verification procedures for sensitive requests, and a culture that encourages reporting suspicious contact are the primary defenses — themes explored in Governance, Compliance & Career Readiness.
Key Concepts
- Manipulates human psychology rather than exploiting technical flaws
- Common forms: phishing, pretexting, baiting, and tailgating
- Often the first step in a larger multi-stage attack
- Business email compromise (BEC) is a especially costly variant
- Effective even against organizations with strong technical controls
- Mitigated primarily through awareness training and verification procedures
Use Cases
Frequently Asked Questions
From the Blog
What Does a Social Worker Do? A Complete Overview
A social worker helps individuals, families, and communities cope with challenges by connecting them to resources, providing counseling, and advocating on their behalf. The work spans healthcare, schools, child welfare, and community settings.
Read More AI & TechnologyWhat Is a Social Media Influencer, Really?
A social media influencer is someone who has built a trusted audience on a platform and can shape that audience's opinions or purchases. This guide explains the role, the skills behind it, and how technology powers modern influencer work.
Read More AI & TechnologyBachelor of Arts: What It Is and What You Can Do With It
A Bachelor of Arts (BA) is a three-to-four-year undergraduate degree in humanities, social sciences, or fine arts that builds research, writing, and analytical skills useful across many different careers.
Read More AI & TechnologyWhat Is Sustainability? A Practical Definition
Sustainability means meeting present needs without compromising the ability of future generations to meet their own, balancing environmental, social, and economic factors. This guide explains the concept and how it applies to technology.
Read More