Emotional manipulation.

Desire to help.

Simplistic methods.

Immediate action.

Trust.

Long relationship. To make friends with the victim.

Target hook. To win the confidence of the victim.

The attack. To extract the data.

The Exit. To cover their tracks and disappear.

Target research. Preparation for an attack.

The attack can be carried out through social networks.

The attack can be carried out personally.

The attack can be carried out by e-mail.

The attack can be carried out by TV.

The attack can be carried out by phone.

To cause harm or inconvenience.

For corrupting data.

To get access your email.

To gain access to valuables.

To gain access to critical information.

Social engineering is based on application vulnerabilities.

Social engineering relies on the psychological characteristics of people.

Social engineering relies on human error.

Social engineering relies on vulnerabilities in networked systems.

Social engineering relies on vulnerabilities in operating systems.

This is a type of hacking attack.

Social engineering describes the technical methods of hacking.

Social engineering is an umbrella term that describes a variety of cyberattacks.

This is the art of exploiting human psychology.

This is a way to trick people.

A procedure that defines how identified vulnerabilities should be assessed, processed, and corrected, as well as how and when information about these vulnerabilities should be made public to external parties.

A policy that prohibits the disclosure of information about vulnerabilities, attempting to prevent potential malicious use of vulnerabilities before they are fixed.

A policy that allows ethical hackers and security researchers to report vulnerabilities to responsible persons or teams, ensuring a safe correction process without disclosing information to the public.

A document that details the identified vulnerabilities of a product, their potential impact, and recommended corrective measures.

Rules that establish deadlines and conditions for the open disclosure of information about vulnerabilities after sufficient time has been provided for their correction.

Only the physical security of facilities and systems.

The impact of the vulnerability on system security and potential consequences for users.

Only the economic impact of vulnerabilities.

Internal characteristics of vulnerabilities and external factors that do not depend on time.