Social Engineering - Word Drop

Social engineering is tricking people into giving away information or access, or into doing something that weakens security. Attackers target people because a user is often the ______ point in a system. It is often easier to trick one person than to break through technical protection.

______ is a common form of social engineering. Messages, usually emails, pretend to come from a trusted ______ such as a bank. They try to make the user click a ______ to a fake website. They may also persuade the user to open an ______ that installs harmful software. Signs include a generic ______ such as 'Dear customer' and a sense of urgency. Another sign is a sender address that does not ______ the real one.

The purpose is to steal login details, money or personal data. Another aim is to get ______ past a company's defences so it can spread across the network. The damage includes an attacker logging in with stolen details to read, change or delete data. The victim can also suffer a financial ______ and damage to its public ______. In a scenario, describe how the trick was used, its purpose and the ______ it posed.