Illusion of Presence: Physical Deception and Direct Manipulation in Social Engineering

Abstract This paper proposes a novel taxonomy of physical social engineering attacks that require physical & direct interaction with the target. It addresses the classification challenge found in the literature, where approximately 35% of non-SEA cases are identified. This helps in understanding diverse methodologies employed by attackers. This paper presents a comprehensive state-of-the-art study of each attack’s concept, background, methodology, and impact on individuals or organisations, to estimate the severity of the attack. Also, social and psychological factors associated with attacks, such as trust, obedience, respect, and kindness, are exploited, which requires a critical need to enhance awareness and integrate psychology with security measures. This emphasises considering the human element in cybersecurity solutions and their understanding.