Definition ∞ Social engineering malware refers to malicious software that relies on psychological manipulation to trick users into performing actions that compromise their security. Attackers use deceptive tactics, such as phishing emails or fake websites, to deliver and execute this malware. Once installed, it can steal credentials, control systems, or facilitate unauthorized transactions. This method exploits human vulnerabilities rather than technical system flaws.
Context ∞ Social engineering malware poses a pervasive and evolving threat to digital asset holders, often targeting individuals through convincing fake advertisements, support messages, or urgent security alerts. These attacks are particularly dangerous because they bypass traditional technical safeguards by manipulating the user directly. Constant vigilance and critical assessment of unsolicited communications are essential for preventing the installation of such malicious programs. User education remains a primary defense against these sophisticated deception tactics.