Social engineering is a set of psychological manipulation techniques used to get people to reveal information, grant access or perform actions that benefit an attacker. It targets human behavior rather than software weaknesses.
Why it matters
Even strong technical controls fail if an employee can be talked into resetting a password or sharing a code. Common forms include phishing, phone pretexting, impersonating IT support and tailgating into buildings. Verification procedures and a culture where people can question requests are the best defense.
Example
A caller claims to be from the help desk, says there is an urgent security issue, and asks you to read out the login code you just received. The code is the attacker completing their own login.
Common mistakes
- Believing only gullible people fall for it. Urgency and authority work on everyone.
- Having no process for verifying requests through a second channel.
- Sharing one-time codes with anyone, including support.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.