CompTIA Security+ (SY0-701) - Threats, Vulnerabilities & Security Controls

A physical social engineering technique where an unauthorized person follows an authorized person into a restricted area, often pretending to be an employee or delivery person.

The psychological manipulation of people into performing actions or divulging confidential information. It exploits human vulnerabilities rather than technical ones.

A social engineering attack where an attacker attempts to trick a victim into giving up sensitive information (e.g., usernames, passwords, credit card details) by disguising themselves as a trustworthy entity in an electronic communication.

A more targeted form of phishing where the attacker tailors the message to a specific individual or organization, often using personal information to increase credibility and the likelihood of success.

A highly targeted phishing attack aimed at high-profile individuals within an organization, such as CEOs or CFOs, often seeking access to critical financial or organizational data. It's a type of spear phishing.

A social engineering attack conducted over the phone (voice phishing), where attackers impersonate legitimate entities to trick victims into revealing sensitive information or performing actions.

A social engineering attack conducted via SMS (text message phishing), where attackers send deceptive text messages to trick recipients into clicking malicious links or divulging personal information.