Social engineering attacks manipulate human behavior rather than exploiting technical vulnerabilities. Phishing is the most common form of social engineering.

Phishing attacks impersonate trusted sources to trick users into revealing sensitive information or clicking malicious links. These attacks often create urgency or fear to prompt quick action.

Organizations use simulated phishing campaigns to educate users, measure awareness, and improve security behavior. These simulations are a proactive training tool designed to reduce risk.