Social engineering
Social engineering exploits people's trust, urgency or fear rather than technical flaws to obtain passwords, money or access.
Examples
Urgent payment requests posing as the CEO, "IT support" phone calls, fake delivery and invoice emails, cloned-voice calls.
Protection
Staff training, second-channel checks for payments and permission changes, and reducing executives' public personal data.
Frequently asked questions
Are small firms targeted?
Yes, often more easily because their processes are lighter.