Social engineering typically involves some type of ploy. Some are basic, like sending an employee a link to malware disguised as a lottery winning announcement; or a complex, multi-month effort to gain someone’s trust online.
They all have the same thing in common: a request for the employee to do something. Like vampires, hackers using social engineering must be invited in to do their damage. Yet social engineering attacks are involved in approximately 90% of all successful cyber attacks.