Social Engineering
Social Engineering
Soziale Manipulation
Social engineering is the targeted manipulation of people to move them to actions or to the disclosure of information that harms security — the attack on the human rather than on the technology. It exploits trust, authority, helpfulness, fear and time pressure. Phishing is its best-known but by far not only manifestation.
History & facts. The methods are as old as fraud itself and exploit basic human patterns: a feigned pretext (pretexting), posing as an authority, exploiting helpfulness or creating urgency. The settings are e-mail, telephone, chat and the physical space — such as unauthorised following through a secured door (tailgating). The particularly costly „CEO fraud“ combines research, authority pressure and time scarcity to obtain fraudulent transfers.
Outlook & recommendation. Since the human is the target, technical means help only to a limited extent; what is decisive are clear, rehearsed processes that let manipulation come to nothing — such as a mandatory second approval for payments via an independent channel. Awareness should convey patterns and response routes, not stoke fear. Artificial Intelligence (AI) makes deceptions more convincing, which is why robust processes become more important than recognising individual telltale features.