Social engineering

Social engineering covers psychological manipulation techniques aimed at getting a person to disclose information or take an action that goes against security. Attackers exploit trust, urgency, authority, or fear rather than technical flaws. Phishing is a common form of it.

Example

A fake technician calls an employee and asks for their password to "resolve an urgent incident".

Related concepts

The whole glossary