Social engineering has received great attention among different scholars. The cases of social engineering are on rise from the assumption that most people fall victims of scams since they are ignorant, greedy or naive. Social engineering attacks come in many different forms ranging from online attacks, perhaps via email, to phone calls. The purpose of this research was to evaluate the techniques that social engineers use to exploit victims. Further, the researcher was determined to assess the tactics that social engineers use in order to exploit victims, the human characteristics that increase susceptibility to victimization by social engineers, and the role played by education, training, and awareness in preventing social engineering attacks. A comprehensive literature was conducted to answer the research questions. The study established that the major tactics employed by social engineers include phishing, baiting, tailgating, pretexting, and quid pro quo. Moreover, personal traits of humans including agreeableness, openness, extraversion, and demographic characteristics increase susceptibility to social engineering attacks. Training, awareness, and education essentially prevent social engineering attacks.;In conclusion, realizing that social engineering attacks are here to stay and cannot be stopped but prevented is the key to successfully understanding social engineering attacks. The best defense a person can take against social engineering attacks is to be aware of their surroundings.
展开▼
