Social engineering has been a popular tactic for a long time because it targets human vulnerabilities. There is no brute force’spray-and-pray’ password guessing. No need to search for unpatched software. It relies instead on manipulating emotions like trust, fear, or respect for authority to gain access to sensitive data or protected systems.