Manipulating people into revealing information or taking actions that compromise security, rather than attacking technology directly.
Social engineering exploits human psychology, trust, urgency, authority, or fear, to trick people into bypassing security. Phishing is the most common form, but it also includes pretexting, baiting, and impersonation over phone or in person.
Because it targets people rather than systems, defense relies on awareness, clear verification procedures for sensitive requests, and a culture where reporting suspicious approaches is encouraged.
KaitoSec