Human Behavior & Social Engineering

The "weakest link." The best security (DMARC) can still be beaten by a "clever" email. This section covers social engineering—the psychological tricks (like "urgency" or "authority") that attackers use to manipulate a human into clicking.

13 questions in this topic

What is social engineering? What are common psychological tricks in phishing? What is urgency bias? What is authority bias in scams? Why do people fall for fake invoices or CEO requests? What is the “fear of missing out” (FOMO) tactic in phishing? How do scammers exploit curiosity or flattery? How do attackers localize social engineering for different regions? What are “emotionally engineered” subject lines? How can awareness training reduce attacks? What’s the impact of internal phishing simulations? What’s “phish fatigue”? How can marketing teams accidentally teach bad behavior (CTA mimicry)?

Questions about Human Behavior & Social Engineering