Social engineering

When attackers trick people (instead of machines) into giving away secrets or access.

An attacker might pose as IT support to obtain login credentials. Staff awareness and verification procedures help prevent breaches caused by human error.