🎭
Social Engineering
Threats
Psychological manipulation tactics used to elicit secrets, actions, or access from targets.
Definition
Social engineering includes pretexting, impersonation, urgency, authority pressure, and baiting. It often precedes phishing, SIM swapping, and credential theft.
In plain English
Psychological manipulation tactics used to elicit secrets, actions, or access from targets.
Why this matters
Why it matters: Technical controls fail if humans are tricked; privacy breaches often start with social engineering.
Example
Example: Establish verification procedures, use phishing-resistant MFA, and train users to verify requests via trusted channels.