Title: The most common social engineering attacks [updated 2020] - Infosec Resources
Headings: The most common social engineering attacks [updated 2020]
The most common social engineering attacks [updated 2020]
Introduction
Phishing
Watering hole
Whaling attack
Pretexting
Baiting and quid pro quo attacks
Tailgating
Read more about social engineering attacks
Sources

Content: Messages are composed to attract the user’s attention, in many cases to stimulate his curiosity by providing a few pieces of information on a specific topic and suggesting that the victims visit a specific website to learn more. Phishing messages aimed at gathering a user’s information convey a sense of urgency. This is an attempt to trick the victim into disclosing sensitive data in order to resolve a situation that could get worse without the victim’s interaction. Attackers leverage shortened URL or embedded links to redirect victims to a malicious domain that could host exploit codes or that could be a clone of legitimate websites with URLs that appear legitimate. In many cases, the actual link and the visual link in the email are different; for example, the hyperlink in the email does not point to the same location as the apparent hyperlink displayed to the users. Phishing email messages have a deceptive subject line to entice the recipient to believe that the email has come from a trusted source. Attackers use a forged sender’s address or the spoofed identity of the organization. They usually copy contents such as texts, logos, images and styles used on the legitimate website to make it look genuine. Watering hole
A watering hole attack consists of injecting malicious code into the public web pages of a site that the targets used to visit.