Which social engineering technique involves creating a fabricated scenario to obtain information?

Which social engineering technique involves creating a fabricated scenario to obtain information?

• A. Pretexting
• B. Phishing
• C. Baiting
• D. Quid pro quo

Answer: (A)

Pretexting is the social engineering technique that uses a fabricated scenario to obtain information. The attacker creates a believable story and a false identity—such as a bank official, IT support, or a supervisor—and engages the target in conversation to coax them into revealing sensitive data or granting access. The scenario provides a plausible reason for the request, which helps lower suspicion and builds trust, making the target more likely to disclose passwords, account numbers, or verification codes. This approach hinges on convincing the victim that the interaction is legitimate, so the attacker can obtain what they want. For example, someone might call claiming to need to verify a security update and pressure the user to share their password. By contrast, phishing relies on misleading messages to lure action or data, baiting uses a tangible lure to trigger curiosity or greed, and quid pro quo involves offering a benefit in exchange for information.

Pretexting is the social engineering technique that uses a fabricated scenario to obtain information. The attacker creates a believable story and a false identity—such as a bank official, IT support, or a supervisor—and engages the target in conversation to coax them into revealing sensitive data or granting access. The scenario provides a plausible reason for the request, which helps lower suspicion and builds trust, making the target more likely to disclose passwords, account numbers, or verification codes. This approach hinges on convincing the victim that the interaction is legitimate, so the attacker can obtain what they want. For example, someone might call claiming to need to verify a security update and pressure the user to share their password. By contrast, phishing relies on misleading messages to lure action or data, baiting uses a tangible lure to trigger curiosity or greed, and quid pro quo involves offering a benefit in exchange for information.