Here is a small link to a great post from Steve King where he recaps some of the most effective tactics we use in social-engineering:
- Standard “Internal” email.
- Everyone loves free stuff.
- Old School: The Telephone.
- Brass Tailgating.
I will personally add : fake recruiting, and fake customers or 3rd parties intrusion or calls.
“It takes more than just technology to prevent a cyber-attack.”