Social Engineering

Manipulating people into revealing information, installing malware, or taking actions that compromise security.

Also known as human hacking social engineering attack

Social engineering exploits human psychology rather than technical vulnerabilities. Attackers impersonate trusted entities, create urgency, or offer something desirable (free software, job offers, prizes) to manipulate victims into compromising their security.

ClickFix campaigns, fake CAPTCHA pages, and malicious game cheats are modern social engineering delivery methods for infostealers. These techniques bypass email filters because the victim actively visits the malicious page and runs the payload themselves.

Read about ClickFix industrialization in our ErrTraffic investigation.