{"id":88142,"date":"2026-05-14T13:24:50","date_gmt":"2026-05-14T20:24:50","guid":{"rendered":"https:\/\/www.malwarebytes.com\/malwarebytes\/?page_id=88142"},"modified":"2026-05-14T13:29:03","modified_gmt":"2026-05-14T20:29:03","slug":"social-engineering","status":"publish","type":"page","link":"https:\/\/www.malwarebytes.com\/social-engineering","title":{"rendered":"Social Engineering"},"content":{"rendered":"\t\t<div class=\"wp-block-malware-bytes hero-banner-v2 layout-2\" id=\"hero-banner-v2-af1a158e-b69a-4247-8d2d-65b57fab8260\">\t\t\t<div class=\"hero-banner-v2-main\">\t\t\t\t\t\t\t\t\t<div class=\"hero-banner-v2__content\">\t\t\t\t\t\t<div class=\"container\">\t\t\t\t\t\t\t<div class=\"hero-banner-v2__stack\">\t\t\t\t\t\t\t\t<h1 class=\"heading-text\">What is social engineering?<\/h1>\t\t\t\t\t\t\t\t<p class=\"desc-text\">Learn effective strategies to safeguard your personal information and defend against social engineering, a cunning tactic used by cybercriminals to manipulate individuals.<a href=\"https:\/\/www.malwarebytes.com\/mac-download\/\"><\/a><\/p>\t\t\t\t\t\t\t\t<div class=\"hero-banner-v2__actions\">\t\t\t\t\t\t\t\t\t<p class=\"hero-banner-v2__button hero-banner-v2__button--primary download-btn-one btn-main btn-primary-white\"><a href=\"\/solultions\/scam-guard\">Scam Guard<\/a><br><\/p>\t\t\t\t\t\t\t\t<\/div>\t\t\t\t\t\t\t<\/div>\t\t\t\t\t\t<\/div>\t\t\t\t\t<\/div>\t\t\t\t\t\t\t\t<\/div>\t\t<\/div>\t\t<h2 class=\"wp-block-heading\" id=\"h-key-takeaways\"><strong>Key takeaways<\/strong><\/h2><ul class=\"wp-block-list\"><li>Social engineering is a cyberattack method that manipulates people into revealing <a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/pii\">sensitive information<\/a> or taking unsafe actions by exploiting human behavior rather than technical vulnerabilities.<\/li><li>Attackers rely on psychological triggers like fear, urgency, curiosity, or trust, often using impersonation, deception, or emotional appeals to bypass security defenses.<\/li><li>These attacks typically follow a process: researching targets, gaining trust through pretexts or impersonation, and persuading victims to share data, transfer money, or grant access.<\/li><li>Common forms include phishing (email, SMS, voice), baiting, pretexting, scareware, and tech support scams, all designed to trick individuals into compromising security.<\/li><li>Effective defense combines awareness and tools: multi-factor authentication, training to recognize scams, strong cybersecurity software, spam filters, and cautious behavior when handling messages or requests. If you&#8217;re not sure if a message is a scam, use Malwarebytes <a href=\"\/solutions\/scam-guard\">Scam Guard <\/a>to verify it. <\/li><\/ul><h2 class=\"wp-block-heading\" id=\"what-is-social-engineering-\">What are social engineering attacks?<\/h2><p class=\"wp-block-paragraph\">Social engineering attacks in computing are sophisticated methods used by cybercriminals to manipulate individuals into compromising their own security. These attacks often result in victims unknowingly sending money, disclosing sensitive personal or organizational information, or breaching security protocols.<\/p><p class=\"wp-block-paragraph\">The effectiveness of social engineering lies in its ability to exploit human emotions such as fear, curiosity, or empathy, leading individuals to act impulsively against their better judgment. By understanding and playing on these emotional triggers, attackers persuade victims to make decisions that may seem irrational in hindsight, such as downloading harmful software, visiting unsafe websites, or sharing confidential data.<\/p><hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\"\/><div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-7387b849 wp-block-columns-is-layout-flex\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/11\/phishing-scam-protection-icon-0B73D5.svg?w=1024\" alt=\"\" class=\"wp-image-120125\" style=\"aspect-ratio:0.7764298093587522;width:59px;height:auto\"\/><\/figure><\/div><div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-container-core-column-is-layout-3606e73f wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30);flex-basis:60%\"><h3 class=\"wp-block-heading has-dark-blue-color has-text-color has-link-color wp-elements-206cb12516cf7911541848b4cf513a38\" id=\"h-scam-nbsp-or-legit-scam-guard-knows\">Scam&nbsp;or legit? Scam Guard knows.<\/h3><\/div><div class=\"wp-block-column is-vertically-aligned-center has-global-padding is-content-justification-right is-layout-constrained wp-container-core-column-is-layout-2910ada7 wp-block-column-is-layout-constrained\" style=\"flex-basis:30%\"><div class=\"wp-block-malware-bytes-button mb-button\" id=\"mb-button-a2b2e60f-b6c4-45fc-8aac-20ae3cf27e09\"><div class=\"mb-button__row u-justify-content-center\"><div class=\"mb-button__item mb-button-item-0\"><p class=\"btn-main\"><a href=\"https:\/\/www.malwarebytes.com\/solutions\/scam-guard\" data-type=\"link\" data-id=\"https:\/\/www.malwarebytes.com\/scamguard\" target=\"_blank\" rel=\"noreferrer noopener\">TRY IT NOW<\/a><\/p><\/div><\/div><\/div><\/div><\/div><hr class=\"wp-block-separator aligncenter has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\"\/><h2 class=\"wp-block-heading\" id=\"how-does-social-engineering-work-\">How does social engineering work?<\/h2><p class=\"wp-block-paragraph\">Social engineering involves psychological tactics to manipulate people into revealing sensitive information, crucial for system access or identity theft. It exploits human error, often through deceit or impersonation, leading to security breaches and data compromise, without relying on technical hacking methods.<\/p><p class=\"wp-block-paragraph\">Social engineering assaults are typically multi-step processes. Initially, the attacker researches the target to collect enough information and essential background details, identifying vulnerabilities and weak security measures crucial for the attack&#8217;s success. Following this, the attacker employs tactics like pretexting or impersonating authority figures to earn the trust of the victim. This manipulation is designed to elicit actions that compromise security, such as divulging confidential information or providing access to vital systems.<\/p><p class=\"wp-block-paragraph\"><strong>Social engineering attacks manipulate human psychology to bypass technical security measures. They carefully select their intended victim based of various factors. Key tactics include:<\/strong><\/p><ol start=\"1\" class=\"wp-block-list\"><li><strong>Impersonation<\/strong>: Attackers often masquerade as reputable entities\u2014big brands, government agencies, or authority figures\u2014to gain trust. For example, they may create fraudulent websites mirroring major brands to deceive users into revealing sensitive information.<\/li><li><strong>Exploiting Emotions<\/strong>: These attacks commonly leverage emotions like fear, urgency, or greed. Scammers might send alarming messages about a compromised bank account, or entice victims with fraudulent promises of financial gain, such as the notorious &#8216;Nigerian Prince&#8217; email scam.<\/li><li><strong>Preying on Goodwill or Curiosity<\/strong>: Social engineers also exploit a person\u2019s natural inclination to help or their curiosity. They might send emails appearing to be from friends or social networks, asking for contact information, assistance or enticing users to click on a malicious link under the guise of an intriguing story or helpful resource.<\/li><\/ol><p class=\"wp-block-paragraph\">Understanding these tactics is crucial for recognizing and thwarting social engineering attacks. They prey on human nature rather than technological flaws, making awareness and vigilance key defenses against such threats.<\/p><h2 class=\"wp-block-heading\" id=\"latest-news-on-social-engineering\">How to protect against social engineering attacks<\/h2><p class=\"wp-block-paragraph\">Social engineering attacks can take many forms, from phishing emails to manipulation via phone calls or text messages. Because they primarily target human vulnerabilities rather than technological flaws, defending against them requires a combination of awareness, vigilance, and technological safeguards.<\/p><p class=\"wp-block-paragraph\">The following steps offer a comprehensive approach to enhance your defense against these increasingly common and sophisticated attacks:<\/p><ol start=\"1\" class=\"wp-block-list\"><li><strong>Use Multi-Factor Authentication<\/strong>: Implementing two-factor or multi-factor authentication is crucial. It adds an extra layer of security, ensuring that even if login credentials are compromised, unauthorized access is still prevented.<\/li><li><strong>Security Awareness Training<\/strong>: Regular training for all employees is vital to recognize and respond to social engineering attacks. This training should cover the identification of suspicious activities and the importance of not sharing sensitive information.<\/li><li><strong>Install a Strong Cybersecurity Program<\/strong>: Use comprehensive cybersecurity software, such as Malwarebytes, that can recognize and neutralize threats, including malicious websites, malvertising, malware, <a href=\"https:\/\/www.malwarebytes.com\/computer-virus\">viruses<\/a>, and <a href=\"https:\/\/www.malwarebytes.com\/ransomware\">ransomware<\/a>.<\/li><li><strong>Implement Access Control Policies and Cybersecurity Technologies<\/strong>: Enforce strict access control policies, including adaptive authentication and a zero-trust security approach. Utilize technologies like spam filters, secure email gateways, firewalls, antivirus software, and keep systems updated with the latest patches.<\/li><li><strong>Turn Spam Filters On<\/strong>: Activate spam filters to block phishing emails and other forms of spam. While some legitimate emails might be filtered out, you can mitigate this by marking them as \u201cnot spam\u201d and adding legitimate senders to your contacts list.<\/li><li><strong>Learn How to Spot <a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/phishing-email\">Phishing Emails<\/a><\/strong>: Educate yourself and others on identifying phishing attempts. Look for red flags like mismatched sender addresses, generic salutations, unusual URLs, poor grammar, and offers that seem too good to be true.<\/li><li><strong>Disable Macros in Documents<\/strong>: Turn off macros in your software. Be cautious with email attachments that prompt you to enable macros, especially from unknown sources. If in doubt, verify the legitimacy of the attachment with the sender.<\/li><li><strong>Do Not Respond to Suspected Scams<\/strong>: Avoid responding to potential scams, whether via email, SMS, or phone calls. Responding confirms to scammers that your contact information is valid, encouraging more attempts. Forward suspicious texts to 7726 (SPAM) to help your carrier filter spam.<\/li><\/ol><p class=\"wp-block-paragraph\">By implementing these strategies, you can create a robust defense system against social engineering attacks, safeguarding both your personal data and your organization&#8217;s sensitive information. Remember, staying informed and cautious is your first line of defense in the ever-evolving landscape of cybersecurity threats.<\/p><h2 class=\"wp-block-heading\" id=\"what-are-the-types-of-social-engineering-\">Types of social engineering attacks<\/h2><p class=\"wp-block-paragraph\">Social engineering attacks predominantly occur through various forms of <a href=\"\/phishing\">phishing<\/a>.These attacks exploit human psychology and trust, rather than relying on technical hacking methods. The effectiveness and prevalence of phishing make it a critical concern for both individuals and organizations. Here&#8217;s a more detailed breakdown of each type:<\/p><ol start=\"1\" class=\"wp-block-list\"><li><strong>Email Phishing<\/strong>: Attackers impersonate legitimate entities through emails, tricking recipients into revealing personal data or credentials. These emails often contain links to deceptive websites or malicious attachments.<\/li><li><strong>Bulk Phishing<\/strong>: This method involves sending the same phishing email to millions of people. The emails appear to be from recognizable organizations and often request personal information under false pretenses.<\/li><li><strong><a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/spear-phishing\">Spear Phishing<\/a><\/strong>: A more targeted form of phishing, where attackers customize their messages for specific individuals using information sourced from social media or professional networks.<\/li><li><strong><a href=\"https:\/\/www.malwarebytes.com\/whaling-attack\">Whale Phishing<\/a><\/strong>: A high-level spear phishing tactic aimed at senior executives or high-profile individuals. These attacks are highly personalized and often involve complex deception.<\/li><li><strong>Voice Phishing (Vishing)<\/strong>: This technique uses phone calls to deceive individuals into divulging sensitive information. Attackers may pose as legitimate organizations or authority figures.<\/li><li><strong>SMS Phishing (<a href=\"https:\/\/www.malwarebytes.com\/what-is-smishing\">Smishing<\/a><\/strong>): A variant of phishing conducted through text messages. These messages lure recipients into clicking on malicious links or divulging sensitive information.<\/li><li><strong>Search Engine Phishing<\/strong>: In this approach, attackers create fake websites that appear high in search engine results. When users visit these sites, they are at risk of information theft.<\/li><li><strong>Angler Phishing<\/strong>: This form exploits social media platforms, where attackers create fake customer service accounts to interact with victims, often leading them to phishing sites.<\/li><\/ol><p class=\"wp-block-paragraph\">Some other social engineering methods aside of phishing are as follows:<\/p><ol start=\"1\" class=\"wp-block-list\"><li><strong>Baiting<\/strong>: Tempts victims with a false promise of goods or services to steal information or install malware.<\/li><li><strong>Tailgating\/Piggybacking<\/strong>: Involves unauthorized access to restricted areas by physically following an authorized person or digitally exploiting someone else\u2019s active session.<\/li><li><strong>Pretexting<\/strong>: Attackers fabricate scenarios to extract sensitive information or gain access, often by posing as someone with authority or a need to verify identity.<\/li><li><strong>Quid Pro Quo<\/strong>: Offers a service or benefit in exchange for sensitive information, exploiting the victim&#8217;s desire for a good deal or reward.<\/li><li><strong><a href=\"\/cybersecurity\/basics\/scareware\">Scareware<\/a><\/strong>: Uses fear tactics to manipulate victims into installing malware or revealing confidential information.<\/li><li><strong>Watering Hole Attack<\/strong>: Targets specific groups by infecting websites they frequently visit, leading to data theft or malware installation.<\/li><li><strong><a href=\"https:\/\/www.malwarebytes.com\/trojan\">Trojan<\/a> Attacks<\/strong>: Malware disguised as legitimate software, often spread through email attachments from seemingly trustworthy sources.<\/li><li><strong>Tech Support Scams<\/strong>: Deceive victims into believing their device is compromised and charge money for unnecessary \u201cfixes.\u201d<\/li><li><strong>Scam Calls<\/strong>: Involves using phone calls (including robocalls) to scam victims, often by posing as legitimate organizations or authorities.<\/li><\/ol><p class=\"wp-block-paragraph\">Understanding these phishing methods and other social engineering tactics is crucial for safeguarding against these prevalent and evolving threats.<\/p><h2 class=\"wp-block-heading\" id=\"what-is-the-history-of-social-engineering-\">Examples of social engineering attacks<\/h2><p class=\"wp-block-paragraph\">Here are some real-world examples of social engineering we\u2019ve reported on over at Malwarebytes Labs. In each example, social engineering scammers are looking for the right target and the right emotional trigger. Sometimes the combination of target and trigger can be hyper-specific (as with a spear phishing attack). Other times, scammers may go after a much broader group.<\/p><p class=\"wp-block-paragraph\"><strong>The sextortion scam:<\/strong> In this first example, scammers are casting a wide net. The target? Anyone who watches porn. The victim is notified via email that their web cam has supposedly been hacked and used to record them watching adult videos. The scammer also claims they\u2019ve hacked the recipient\u2019s email account, using an old password as proof. If the victim doesn\u2019t pay up via Bitcoin, the scammer threatens to release the video to all the victim\u2019s contacts. Generally speaking, the scammer doesn\u2019t have video of you and your old password is from a previously disclosed data breach.<\/p><p class=\"wp-block-paragraph\"><strong>The grandparent scam:<\/strong> This scam has been going around for years and targets anyone with living family, usually the elderly. Parents or grandparents receive a call or text message from the scammer, posing as a lawyer or law enforcement. The scammer claims the victim\u2019s relative has been arrested or injured and needs money to cover bail, legal fees, or hospital bills. In the case of the SMS text message version of the scam, merely replying ends up costing the victim money.<\/p><p class=\"wp-block-paragraph\"><strong>The Social Security Number scam:<\/strong> In this grift, things start to narrow as it only applies to US citizens. The victim receives a prerecorded robocall purporting to be from the Social Security Administration. The message asserts the victim\u2019s SSN has been \u201csuspended\u201d for \u201csuspicious trails of information.\u201d Never mind the fact that your SSN can\u2019t be suspended, if the victim falls for the ploy and returns the call, they\u2019ll be asked to pay a fine to straighten everything out.<\/p><p class=\"wp-block-paragraph\"><strong>The John Wick 3 scam:<\/strong> Here\u2019s a good example of spear phishing. In this case the scammers are after a very specific target: a John Wick fan who enjoys comic books, but prefers to read them on Amazon Kindle. While searching for John Wick comics, the target is offered a free download for the third John Wick film\u2014at the time of the scam, the movie hadn\u2019t been released in theaters. Following the link embedded in the movie description takes the victim down a rabbit hole of illegal streaming sites for pirated movies.<\/p><hr class=\"wp-block-separator has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\"\/><div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-7387b849 wp-block-columns-is-layout-flex\"><div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:15%\"><figure class=\"wp-block-image aligncenter size-large is-resized\"><img decoding=\"async\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/11\/phishing-scam-protection-icon-0B73D5.svg?w=1024\" alt=\"\" class=\"wp-image-120125\" style=\"aspect-ratio:0.7764298093587522;width:59px;height:auto\"\/><\/figure><\/div><div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-container-core-column-is-layout-3606e73f wp-block-column-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30);flex-basis:60%\"><h3 class=\"wp-block-heading has-dark-blue-color has-text-color has-link-color wp-elements-206cb12516cf7911541848b4cf513a38\" id=\"h-scam-nbsp-or-legit-scam-guard-knows\">Scam&nbsp;or legit? Scam Guard knows.<\/h3><\/div><div class=\"wp-block-column is-vertically-aligned-center has-global-padding is-content-justification-right is-layout-constrained wp-container-core-column-is-layout-2910ada7 wp-block-column-is-layout-constrained\" style=\"flex-basis:30%\"><div class=\"wp-block-malware-bytes-button mb-button\" id=\"mb-button-a2b2e60f-b6c4-45fc-8aac-20ae3cf27e09\"><div class=\"mb-button__row u-justify-content-center\"><div class=\"mb-button__item mb-button-item-0\"><p class=\"btn-main\"><a href=\"https:\/\/www.malwarebytes.com\/solutions\/scam-guard\" data-type=\"link\" data-id=\"https:\/\/www.malwarebytes.com\/scamguard\" target=\"_blank\" rel=\"noreferrer noopener\">TRY IT NOW<\/a><\/p><\/div><\/div><\/div><\/div><\/div><hr class=\"wp-block-separator aligncenter has-text-color has-cyan-bluish-gray-color has-alpha-channel-opacity has-cyan-bluish-gray-background-color has-background is-style-wide\" style=\"margin-top:var(--wp--preset--spacing--30);margin-bottom:var(--wp--preset--spacing--30)\"\/><h2 class=\"wp-block-heading\" id=\"h-related-articles\">Related Articles<\/h2><p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.malwarebytes.com\/phishing\">What is phishing?<\/a><\/p><p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/spear-phishing\">What is spear phishing<\/a>?<\/p><p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/vishing\">What is a vishing attack?<\/a><\/p><p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.malwarebytes.com\/cybersecurity\/basics\/catfishing\">What is catfishing?<\/a><\/p><p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.malwarebytes.com\/identity-theft\">What is identity theft?<\/a><\/p><div class=\"wp-block-malware-bytes-faq mb-faq\"><div class=\"container\"><h2>FAQs<\/h2><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>What is social engineering?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">Social engineering is a method used by cybercriminals to manipulate individuals into compromising their own security, often resulting in victims unknowingly sending money, disclosing sensitive information, or breaching security protocols. Rather than exploiting technical flaws, these attacks exploit human emotions like fear, curiosity, and urgency.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>How does social engineering work?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">Attackers typically follow a multi-step process: first researching the target to identify vulnerabilities, then using tactics like pretexting or impersonation to earn trust, and finally manipulating the victim into divulging information or granting access to systems. The approach relies on human error rather than technical hacking methods.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>What are the most common types of social engineering attacks?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">The most common types include email phishing, spear phishing, vishing, smishing, baiting, scareware, pretexting, and tech support scams. Phishing in its many forms is the most prevalent category of social engineering attack.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>What is the difference between social engineering and reverse social engineering?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">In social engineering, attackers approach targets directly to manipulate them into sharing information. In reverse social engineering, victims unknowingly initiate contact with the attacker, often believing they are seeking legitimate help.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>What is an example of a social engineering attack?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">One common example is the sextortion scam, where attackers email victims claiming to have recorded them watching adult content and threatening to release the footage unless paid in Bitcoin. The scammer typically uses an old password from a previous data breach to appear credible, but does not actually have any video.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>How do attackers choose their targets in social engineering?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">Attackers select targets based on factors like emotional vulnerability, access to valuable information, or membership in a specific group. Some attacks cast a wide net, such as bulk phishing, while others are highly targeted, such as spear phishing or whale phishing aimed at senior executives.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>How can I protect myself from social engineering attacks?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">Protection requires a combination of awareness and technology, including enabling multi-factor authentication, completing security awareness training, using spam filters, and installing comprehensive <a href=\"\/premium\">cybersecurity software.<\/a> Avoiding responses to suspected scams and learning to spot phishing red flags are also key defenses.<\/p><\/div><\/div><div class=\"wp-block-malware-bytes-faq-item faq-item\"><div class=\"faq-item__header\"><span class=\"faq__expander\"><\/span><div class=\"faq-item__heading\"><h4><strong>What human emotions do social engineers most commonly exploit?<\/strong><\/h4><\/div><\/div><div class=\"faq-item__answer\" style=\"display:none\"><p class=\"wp-block-paragraph\">Social engineers most commonly exploit fear, urgency, curiosity, and greed to push victims into acting impulsively against their better judgment. For example, a scammer might send an alarming message about a compromised bank account to trigger fear and prompt a hasty response.<\/p><\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Key takeawaysWhat are social engineering attacks?Social engineering attacks in computing are sophisticated methods used by cybercriminals to manipulate individuals into compromising&#8230;<\/p>\n","protected":false},"author":111,"featured_media":88145,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"templates\/page-seo-article.php","meta":{"_acf_changed":false,"_eb_attr":"","_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","footnotes":""},"page_category":[],"class_list":["post-88142","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.5 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>What is Social Engineering &amp; How to Protect Yourself<\/title>\n<meta name=\"description\" content=\"Discover strategies to protect yourself from social engineering attacks and safeguard your information.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.malwarebytes.com\/social-engineering\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Social Engineering What is Social Engineering &amp; How to Protect Yourself\" \/>\n<meta property=\"og:description\" content=\"Discover strategies to protect yourself from social engineering attacks and safeguard your information.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.malwarebytes.com\/social-engineering\" \/>\n<meta property=\"og:site_name\" content=\"Malwarebytes\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Malwarebytes\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-14T20:29:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"642\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Social Engineering What is Social Engineering &amp; How to Protect Yourself\" \/>\n<meta name=\"twitter:description\" content=\"Discover strategies to protect yourself from social engineering attacks and safeguard your information.\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg\" \/>\n<meta name=\"twitter:site\" content=\"@malwarebytes\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering\"},\"author\":{\"name\":\"Malwarebytes\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#\\\/schema\\\/person\\\/953a645c3eedc473398173ee39407c5b\"},\"headline\":\"Social Engineering\",\"datePublished\":\"2026-05-14T20:24:50+00:00\",\"dateModified\":\"2026-05-14T20:29:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering\"},\"wordCount\":2251,\"publisher\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/malwarebytes-social-engineering-share.jpg\",\"inLanguage\":\"en\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering\",\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering\",\"name\":\"What is Social Engineering & How to Protect Yourself\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/malwarebytes-social-engineering-share.jpg\",\"datePublished\":\"2026-05-14T20:24:50+00:00\",\"dateModified\":\"2026-05-14T20:29:03+00:00\",\"description\":\"Discover strategies to protect yourself from social engineering attacks and safeguard your information.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#breadcrumb\"},\"inLanguage\":\"en\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#primaryimage\",\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/malwarebytes-social-engineering-share.jpg\",\"contentUrl\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/09\\\/malwarebytes-social-engineering-share.jpg\",\"width\":1200,\"height\":642,\"caption\":\"malwarebytes-social-engineering-share\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/social-engineering#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.malwarebytes.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Social Engineering\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#website\",\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/\",\"name\":\"Malwarebytes\",\"description\":\"Cyber Security Software &amp; Anti-Malware\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.malwarebytes.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#organization\",\"name\":\"Malwarebytes\",\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/11\\\/Malwarebytes-logo.png\",\"contentUrl\":\"https:\\\/\\\/www.malwarebytes.com\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/11\\\/Malwarebytes-logo.png\",\"width\":1200,\"height\":675,\"caption\":\"Malwarebytes\"},\"image\":{\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/Malwarebytes\",\"https:\\\/\\\/x.com\\\/malwarebytes\",\"https:\\\/\\\/www.youtube.com\\\/user\\\/Malwarebytes\",\"https:\\\/\\\/www.instagram.com\\\/malwarebytesofficial\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/malwarebytes\\\/\",\"https:\\\/\\\/www.reddit.com\\\/r\\\/Malwarebytes\\\/\"],\"description\":\"A global leader in cybersecurity, antivirus, VPN and digital protection for iOS and Android including mobile, desktop and tablet devices. All-in-one award-winning cybersecurity software and privacy solutions to empower millions of people worldwide to enjoy their digital lives, free from threats and scams. Based in Santa Clara, California, Malwarebytes has offices and (remote) employees all over the United States and the world.\",\"email\":\"press@malwarebytes.com\",\"legalName\":\"Malwarebytes Inc.\",\"foundingDate\":\"2008-01-21\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"501\",\"maxValue\":\"1000\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.malwarebytes.com\\\/#\\\/schema\\\/person\\\/953a645c3eedc473398173ee39407c5b\",\"name\":\"Malwarebytes\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g\",\"caption\":\"Malwarebytes\"},\"url\":\"https:\\\/\\\/www.malwarebytes.com\\\/blog\\\/authors\\\/malwarebytes\"}]}<\/script>\n<meta name=\"googlebot\" content=\"index, follow\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is Social Engineering & How to Protect Yourself","description":"Discover strategies to protect yourself from social engineering attacks and safeguard your information.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.malwarebytes.com\/social-engineering","og_locale":"en_US","og_type":"article","og_title":"Social Engineering What is Social Engineering & How to Protect Yourself","og_description":"Discover strategies to protect yourself from social engineering attacks and safeguard your information.","og_url":"https:\/\/www.malwarebytes.com\/social-engineering","og_site_name":"Malwarebytes","article_publisher":"https:\/\/www.facebook.com\/Malwarebytes","article_modified_time":"2026-05-14T20:29:03+00:00","og_image":[{"width":1200,"height":642,"url":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_title":"Social Engineering What is Social Engineering & How to Protect Yourself","twitter_description":"Discover strategies to protect yourself from social engineering attacks and safeguard your information.","twitter_image":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","twitter_site":"@malwarebytes","twitter_misc":{"Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.malwarebytes.com\/social-engineering#article","isPartOf":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering"},"author":{"name":"Malwarebytes","@id":"https:\/\/www.malwarebytes.com\/#\/schema\/person\/953a645c3eedc473398173ee39407c5b"},"headline":"Social Engineering","datePublished":"2026-05-14T20:24:50+00:00","dateModified":"2026-05-14T20:29:03+00:00","mainEntityOfPage":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering"},"wordCount":2251,"publisher":{"@id":"https:\/\/www.malwarebytes.com\/#organization"},"image":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering#primaryimage"},"thumbnailUrl":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","inLanguage":"en"},{"@type":"WebPage","@id":"https:\/\/www.malwarebytes.com\/social-engineering","url":"https:\/\/www.malwarebytes.com\/social-engineering","name":"What is Social Engineering & How to Protect Yourself","isPartOf":{"@id":"https:\/\/www.malwarebytes.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering#primaryimage"},"image":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering#primaryimage"},"thumbnailUrl":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","datePublished":"2026-05-14T20:24:50+00:00","dateModified":"2026-05-14T20:29:03+00:00","description":"Discover strategies to protect yourself from social engineering attacks and safeguard your information.","breadcrumb":{"@id":"https:\/\/www.malwarebytes.com\/social-engineering#breadcrumb"},"inLanguage":"en","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.malwarebytes.com\/social-engineering"]}]},{"@type":"ImageObject","inLanguage":"en","@id":"https:\/\/www.malwarebytes.com\/social-engineering#primaryimage","url":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","contentUrl":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg","width":1200,"height":642,"caption":"malwarebytes-social-engineering-share"},{"@type":"BreadcrumbList","@id":"https:\/\/www.malwarebytes.com\/social-engineering#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.malwarebytes.com\/"},{"@type":"ListItem","position":2,"name":"Social Engineering"}]},{"@type":"WebSite","@id":"https:\/\/www.malwarebytes.com\/#website","url":"https:\/\/www.malwarebytes.com\/","name":"Malwarebytes","description":"Cyber Security Software &amp; Anti-Malware","publisher":{"@id":"https:\/\/www.malwarebytes.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.malwarebytes.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en"},{"@type":"Organization","@id":"https:\/\/www.malwarebytes.com\/#organization","name":"Malwarebytes","url":"https:\/\/www.malwarebytes.com\/","logo":{"@type":"ImageObject","inLanguage":"en","@id":"https:\/\/www.malwarebytes.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/11\/Malwarebytes-logo.png","contentUrl":"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/11\/Malwarebytes-logo.png","width":1200,"height":675,"caption":"Malwarebytes"},"image":{"@id":"https:\/\/www.malwarebytes.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Malwarebytes","https:\/\/x.com\/malwarebytes","https:\/\/www.youtube.com\/user\/Malwarebytes","https:\/\/www.instagram.com\/malwarebytesofficial","https:\/\/www.linkedin.com\/company\/malwarebytes\/","https:\/\/www.reddit.com\/r\/Malwarebytes\/"],"description":"A global leader in cybersecurity, antivirus, VPN and digital protection for iOS and Android including mobile, desktop and tablet devices. All-in-one award-winning cybersecurity software and privacy solutions to empower millions of people worldwide to enjoy their digital lives, free from threats and scams. Based in Santa Clara, California, Malwarebytes has offices and (remote) employees all over the United States and the world.","email":"press@malwarebytes.com","legalName":"Malwarebytes Inc.","foundingDate":"2008-01-21","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"501","maxValue":"1000"}},{"@type":"Person","@id":"https:\/\/www.malwarebytes.com\/#\/schema\/person\/953a645c3eedc473398173ee39407c5b","name":"Malwarebytes","image":{"@type":"ImageObject","inLanguage":"en","@id":"https:\/\/secure.gravatar.com\/avatar\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6669cc32dd257a78ae96aa55ab9c1a4bfbe44dcb8c7f32385923c5e589d15b82?s=96&d=mm&r=g","caption":"Malwarebytes"},"url":"https:\/\/www.malwarebytes.com\/blog\/authors\/malwarebytes"}]}},"acf":[],"taxonomy_info":[],"featured_image_src_large":["https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2023\/09\/malwarebytes-social-engineering-share.jpg?w=1024",1024,548,true],"author_info":{"display_name":"Malwarebytes","author_link":"https:\/\/www.malwarebytes.com\/blog\/authors\/malwarebytes"},"comment_info":0,"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/pages\/88142","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/users\/111"}],"replies":[{"embeddable":true,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/comments?post=88142"}],"version-history":[{"count":22,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/pages\/88142\/revisions"}],"predecessor-version":[{"id":411992,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/pages\/88142\/revisions\/411992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/media\/88145"}],"wp:attachment":[{"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/media?parent=88142"}],"wp:term":[{"taxonomy":"page_category","embeddable":true,"href":"https:\/\/www.malwarebytes.com\/wp-json\/wp\/v2\/page_category?post=88142"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}