Definition:  Social Engineering

A method of intrusion CyberCriminals use that relies heavily on human interaction.  It often involves tricking people into breaking normal security procedures, and providing confidential information.

It often involves emails that look legitimate, and request the victim to click on a link or to enter confidential information.  The email usually asks the victim to ‘confirm’ their identity by entering confidential information (either by replying to the email, or by clicking on a provided link to an official-looking website), or to prevent negative consequences (avoid fees/penalties, jail time, legal charges, etc).

The emails usually target the end-user (any computer user in an organization), and relies on the lack of Social Engineering training for end-users.

It is the greatest threat that organizations encounter.