166 terms · 75/46/45
Technique № 002 · class: initial access

Social Engineering

Social engineering as a technique involves manipulating human behavior to obtain information, access, or the execution of actions that benefit the attacker. It relies on trust, authority, urgency, or fear.

Term

description · examples · notes

Social engineering as a technique involves manipulating human behavior to obtain information, access, or the execution of actions that benefit the attacker. It relies on trust, authority, urgency, or fear.

Description

Unlike purely technical techniques, social engineering targets people as the weakest link. It can be conducted via phone, email, in person, or through a combination of channels.

Examples

  • Call from fake tech support requesting login credentials
  • Fake vendor representative requesting a change in payment details
  • Impersonating a new employee to gain physical access to premises

Notes

  • Identity verification through an independent channel is the basic defensive measure.

Mentioned in the news

tags
initial access
◳Composite

Threats

used by 16

Threats that use it. Select one to open its page.

Defenses

countered by 10

How it is countered. Select one to open its page.