Social engineering attacks are attacks in which an attacker uses deception, persuasion, or pressure to coerce a person into providing information, executing a command, or violating security rules.
The goal is to coerce a person into performing a desired action: sharing a password or code via SMS, installing malware, granting physical access, or transferring money.