---
title: "What is social engineering? | Daniel Christensen"
canonical_url: "https://danielchristensen.no/en/glossary/sosial-manipulering"
last_updated: "2026-09-02T13:55:00.067Z"
locale: en
meta:
  description: "Attacks that exploit people instead of technology: trust, stress, helpfulness and authority."
  "og:description": "Attacks that exploit people instead of technology: trust, stress, helpfulness and authority."
  "og:title": "What is social engineering?"
---

[← All terms](https://danielchristensen.no/en/glossary)Glossary

# Social engineering

Attacks that exploit people instead of technology: trust, stress, helpfulness and authority.

Social engineering is the umbrella term for attacks that target people rather than machines. Phishing is the best-known variant, but it also covers fake phone calls, walk-ins at reception, “forgotten” USB sticks and pressure through social media.

The reason it works is that it exploits perfectly normal, good traits: we want to be helpful, we trust people who seem confident, and we act faster when something is urgent. Good defense is therefore less about technology and more about routines you’re allowed to follow even when someone is pushing.

Most attacks follow the same pattern. First information is gathered, usually from completely open sources: the website, LinkedIn, the annual report, photos from the Christmas party. Then a believable story is built, a pretext that gives the attacker a reason to make contact. Finally comes the pressure, which is nearly always about time. You mustn’t get a chance to think, and you mustn’t get a chance to ask anyone else.

When someone does fall for an attack like this, the worst possible response is to look for someone to blame. People who are afraid of being shouted at don’t speak up, and the attack then surfaces weeks later instead of the same afternoon. The organizations that handle this best have made it safe to say “I think I clicked something stupid”. That culture is what actually limits the damage.

Next step

## Want this explained live?

My talks take the terms from this list and show what they mean in practice, with real examples and demos the room remembers.

[See the talks →](https://danielchristensen.no/en/talks) [Try the password generator](https://danielchristensen.no/en/tools/password-generator)