A manipulation technique where attackers deceive individuals into divulging confidential information or performing actions that compromise security. Tactics include phishing, impersonation, and baiting. These attacks exploit human trust rather than technical vulnerabilities.