Social Engineering

In short: Social engineering manipulates people into revealing confidential information or performing actions that benefit attackers.

In more detail: Instead of breaking technology, the human is used as the weakest link: through trust, helpfulness, curiosity, fear or authority.

In Depth

Methods

• Pretexting: invented story, for example as IT support.
• Baiting: bait, such as a “lost” USB stick (removable media).
• Tailgating: following someone through a door without authorisation.
• Phishing: see phishing.

Protection

Security awareness, clear processes (verify identity), do not approve anything under time pressure, a reporting channel for suspicious cases.

See also: Phishing, Spear Phishing, Vishing, Doxxing