Social engineering is an attack against a person or organization to obtain information that they are not authorized to have. Although computers and technical expertise are certainly used to this end, they are not the only avenue an attacker may use. A simple telephone call or face-to-face conversation with the target is more than enough to carry out the attack. Social engineers may spend weeks or even months researching and collecting information about their target, and rehearsing their mannerisms, tone of voice, attitude, approach, and overall methodology for how the attack is meant to be carried out.
Last updated Thursday, 05-Apr-2012 12:15:59 MDT