A scammer calls pretending to be IT support and simply asks for your password — no hacking required, because the human is the easiest lock to pick. Social engineering tricks people, not computers, which is why the weakest link is usually us.
Most attacks trick a person, not a computer
Malware is malicious software — viruses, ransomware, spyware. But the easiest way in is often social engineering: tricking a person into handing over access. Phishing emails impersonate a trusted sender to steal passwords or plant malware.
Urgency ('act now!'), a mismatched sender address, unexpected attachments, and links that don't match the real site are classic warning signs.
- Read: 'Your account is locked! Click here in 10 minutes or lose access.'
- List the warning signs you notice.
- Decide what a safe response is.
What you should see: Urgency plus a threatening link are red flags. The safe move: don't click — go to the real site directly and check.