Social Engineering
5 articles
Social engineering manipulates people (not software) into bypassing security controls. These guides cover pretexting, baiting, and impersonation tactics, how attackers weaponize trust and urgency, and the out-of-band verification and least-privilege practices that blunt them.
ClickFix Attacks: The Fake CAPTCHA That Runs Malware
How ClickFix fake CAPTCHA and 'press Win+R, paste' lures work, the macOS and FileFix variants, their payloads, and how to detect and block them.
MFA Fatigue Attacks: How Push Bombing Works
How MFA fatigue and push bombing turn a stolen password into access, the Uber and Cisco cases, and the settings and detections that stop it.
Tech Support Scams: The Popup, the Call, the Refund
How tech support scams work: browser lockers and fake alerts, the remote access session, the refund overpayment trick, and exactly what to do if you already let someone in.
How Gaslighting Works, and How to Recognize It
A defensive guide to gaslighting: the named techniques, where they show up, and how to detect, document, and safely disengage.
The Social Engineering Playbook
Master the tactics attackers use to manipulate people, pretexting, baiting, vishing, and more, and learn how to defend against them.