Security - Concept
Social engineering
Manipulating people into revealing information or doing something that weakens security
What's it for?
Describes attacks that manipulate people rather than technology so organisations can train staff to resist them.
For example…
A caller pretends to be a director and pressures staff for a login code.
An attacker phones the help desk pretending to be a senior executive and pressures the agent to reset an account password — social engineering
Think of it like…
Pickpocketing that picks the person, not the lock — charm and urgency instead of brute force