Title: What Is Social Engineering? Preventing Social Engineering Attacks | Fortinet
Headings: What Is Social Engineering?
What Is Social Engineering?
Social Engineering Definition
How Does Social Engineering Work?
Human Behavior Misused for Committing Social Engineering Attacks
Liking
Reciprocity
Commitment
Social Proof
Authority
Techniques of Social Engineering Attacks
Baiting
Scareware
Pretexting
Phishing
Spear Phishing
Water Holing
Quid Pro Quo
Honey Trap
Tailgating
Rogue
Vishing
Well-known Examples of Social Engineering Attacks
Tips To Prevent Social Engineering Attacks
Safe Communication and Account Management Habits
Never Click on Links in an Email or Message
Multi-factor Authentication (MFA)
Using Strong Passwords and a Password Manager
Be Cautious of Building Online-only Friendships
Safe Network Use Habits
Never Let Strangers Connect to Your Primary Wi-Fi Network
Use a VPN
Keep All Network-connected Devices and Services Secure
Safe Device Use Habits
Use Comprehensive Internet Security Software
Do Not Ever Leave Your Devices Unsecured in Public
Keep All Software Updated
Check for Known Data Breaches of Your Online Accounts
How Fortinet Can Help
FAQs
What is social engineering?
How does social engineering work?
What are the well-known examples of social engineering attacks?
Learn more about Fortinet today

Content: Attackers may use social networking to exploit the social proof concept by claiming that the victim’s online friends have already endorsed an action, product, or service. Authority
People naturally tend to trust authorities more than those with less experience or expertise. Hence, an attacker may try to use phrases such as “according to experts” or “science proves” to convince a target to agree to something. Techniques of Social Engineering Attacks
Baiting
A baiting attack attempts to draw in a victim by promising something that appeals to their sense of curiosity or greed. This lures the target into installing or clicking on something that ends up putting malware, such as that used for pharming or spyware, onto their system. Scareware
Scareware bombards a target with fake threats or false alarms in the hopes that their natural inclination to protect themselves or something they value drives them to taking the desired action. One of the more common types is using realistic-looking banners warning that their computer may be infected with a virus or some other kind of malware. Pretexting
In an attack that uses pretexting, the attacker lies to the victim regarding their identity. After they have gained the target’s trust, they trick them into handing over sensitive information. Phishing
In a phishing attack, the attacker creates a sense of urgency or appeals to the victim’s curiosity.