Which of the following is a common type of social engineering attack?

Phishing is a common type of social engineering attack because it exploits human psychology to deceive individuals into divulging sensitive information, such as usernames, passwords, or credit card details. Typically, phishing attacks involve the attacker posing as a trustworthy entity, such as a bank or a well-known service provider, often through emails that appear legitimate. These messages usually create a sense of urgency or curiosity, prompting the victim to click on malicious links or download dangerous attachments. By engaging with the content, individuals can inadvertently provide personal information or compromise their systems.

In contrast, ransomware is a type of malware that restricts access to a user's data, demanding payment for its release, rather than manipulating human behavior directly. Spyware and adware are classified as malicious software that track user behavior or display unwanted ads, respectively, but they do not primarily rely on human interaction and deception to gain access to sensitive data.