A cyberattack technique manipulating people into divulging confidential information or compromising security, rather than exploiting technical vulnerabilities directly.