Social engineering is the practice of tricking victims into supplying private information that could facilitate unauthorized access to a network.
Cybercriminals commonly precede cyberattacks with social engineering campaigns because they help them circumvent IT boundary security controls, such as firewalls.
If a successful social engineering attack isn’t possible, a cybercriminal is forced to progress through the first three stages of the cyber kill chain before achieving network access.