Glossary
A simple guide to the cybersecurity terms you need to know.
Instead of hacking a computer, attacker "hack" the person sitting in front of it. It’s using charm, fear, or urgency to get you to do something you shouldn't.
This is the "fake backstory." The attacker creates a character and a scenario (e.g., "I'm from the IT audit team") to make their request for your password seem totally normal.
The classic "fake it 'til you make it." They pretend to be someone you trust your boss, a bank rep, or a tech support agent to lower your guard.
This is a "hero" complex. The attacker secretly breaks something, then "happens" to be there to fix it. Because they helped you, you trust them with whatever information they ask for.
The "throw a wide net" approach. They send thousands of generic, scammy emails hoping a few people will bite.
A targeted attack. Instead of a net, they use a spear. They know your name, your job, and maybe even your cat’s name, making the scam feel incredibly personal and real.
Smishing is via SMS (text), and Vishing is via Voice (phone calls).
Using those handy square codes. You think you’re scanning a menu, but you’re actually being sent to a site designed to steal your login info.
