Cybersecurity / Glossary

Social engineering

Social engineering means manipulating people, rather than hacking computers, so they hand over information, access or money.

Social engineers use normal human instincts: helpfulness, trust in authority, fear of trouble and curiosity. Phishing, vishing and fake tech support are all forms of it.

It works in person too, for example someone in a hi-vis vest following staff through a secure door.

The best defence is a process: verify requests through a known channel, especially when they involve money, passwords or urgency.