Social engineering is a set of psychological manipulation techniques used to get people to reveal information, grant access or perform actions that benefit an attacker. It targets human behavior rather than software weaknesses.
Why it matters
Even strong technical controls fail if an employee can be talked into resetting a password or sharing a code. Common forms include phishing, phone pretexting, impersonating IT support and tailgating into buildings. Verification procedures and a culture where people can question requests are the best defense.
Example
A caller claims to be from the help desk, says there is an urgent security issue, and asks you to read out the login code you just received. The code is the attacker completing their own login.
Common mistakes
- Believing only gullible people fall for it. Urgency and authority work on everyone.
- Having no process for verifying requests through a second channel.
- Sharing one-time codes with anyone, including support.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.