SOCIAL ENGINEERING - THE TACTICS THAT EXPLOIT OUR WEAKNESSES

Abstract

Social engineering is one of the most widespread causes of cybersecurity incidents. It's a type of manipulation that involves techniques based on human psychology to deceive individuals and obtain sensitive information. Some common types of this technique include phishing (sending fraudulent emails or messages), vishing (attempts at fraud through phone calls), smishing (using text messages – SMS – with malicious links), pretexting (creating a false identity or scenario to obtain someone's information), baiting (offering an attractive item to deceive the victim), among others. Increasingly widespread, when used for negative manipulation, it has caused financial losses and risks to the security of companies and individuals. The impacts can be severe, resulting in financial losses, identity theft, reputational damage, and legal liabilities. As a common foundation, they all exploit emotional triggers, trust, and human vulnerabilities, often using digital means, physical means, or combinations of both. Defense and prevention mechanisms that can be applied include awareness and education, reinforcing the importance of safe practices and thorough, continuous verifications. Implementing security measures, training users to recognize fraud, and creating an organizational culture focused on protection are essential to mitigate the risks of these manipulative attacks. Combating malicious social engineering techniques requires the integration of people, processes, and technology in a joint and, above all, frequent effo