Story, Bait, Deal or Threat?

About this interactive

What you are doing: naming the technique from the lever it pulls. Pretexting: a fictitious, plausible story that gives a reason for the request (why they are calling, why they need it), often coupled with impersonation. Baiting: an enticing offer (a free ebook, a free download, free tickets) that lures the victim into the trap; the victim does not know the offer is the attack. Quid pro quo: something for something, a deal such as a bribe, or buying an access card or credentials; it tends to be overt, since the person usually knows they are doing something wrong. Blackmail: the adversary holds damaging information and will release it unless the victim pays or hands something over; overt, because the victim knows. How to use it: is it a story, a free offer, a deal, or a threat?

What you'll learn

Tell four social engineering techniques apart by the lever they pull: pretexting (a made-up story), baiting (an enticing offer that is the trap), quid pro quo (an exchange the victim knowingly makes) and blackmail (a threat to release damaging information)

Aligned to

CompTIA Security+

2.2 Explain common threat vectors and attack surfaces.

CompTIA PenTest+

4.8 Given a scenario, perform social engineering attacks using the appropriate tools.

Key terms

Pretexting: A social engineering technique in which an attacker fabricates a convincing scenario — such as impersonating IT support, a vendor, or an authority figure — to manipulate a target into performing an action or disclosing sensitive information.
Baiting: A social engineering technique that uses an enticing offer or lure to trick a victim into taking an action that compromises their security.
Quid Pro Quo: A social engineering attack technique involving an overt exchange of something for something, such as offering a benefit in return for access, credentials, or sensitive information.
Blackmail: An overt social engineering attack in which an adversary threatens to release damaging information about a victim unless the victim complies with demands such as payment, access credentials, or sensitive data.
Overt Social Engineering: A direct, confrontational form of social engineering in which the target is aware of pressure being applied, such as through blackmail or bribery.
Covert Social Engineering: A subtle form of social engineering in which the target is unaware they are being manipulated, such as through a phishing campaign.

Topics

Pretexting Baiting Quid Pro Quo Blackmail Interactive Categorize

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →