Social engineering refers to the manipulation of individuals to obtain confidential information, gain unauthorized access, or manipulate them into performing actions that may not be in their best interest. Unlike traditional hacking techniques that involve exploiting technical vulnerabilities, social engineering exploits psychological vulnerabilities to deceive individuals.
Common forms of social engineering include:
- Phishing: Phishing involves sending deceptive emails, messages, or websites that appear legitimate to trick individuals into revealing sensitive information, such as usernames, passwords, or financial details.
- Pretexting: In pretexting, an attacker creates a fabricated scenario or pretext to manipulate individuals into providing information or performing actions. This often involves pretending to be someone trustworthy or in authority.
- Baiting: Baiting involves offering something enticing, such as free software or a USB drive, with the intention of infecting the target's system with malware or obtaining sensitive information when the bait is used.
- Quid Pro Quo: Quid pro quo involves offering a service or benefit in exchange for information or access. For example, an attacker might pose as technical support, offering assistance in exchange for login credentials.
