Résumé
This survey addresses the critical challenge of social engineering attacks in cybersecurity, offering a detailed classification of manipulation techniques and an exploration of the cognitive processes they exploit. We identify 40 distinct manipulation techniques by integrating insights from social and cognitive psychology literature, focusing on cognitive biases, social norms, individual needs, and emotions. Our analysis reveals that techniques frequently employ cognitive biases such as the halo effect and individual needs like the need for affiliation to deceive users. We provide practical examples of how these techniques manifest in phishing and spear-phishing campaigns, underscoring their relevance to current cybersecurity threats. Our findings underscore the necessity for cybersecurity defenses that incorporate psychological insights, aiming to enhance user awareness and resilience against these sophisticated attacks. This survey lays the groundwork for future research and practical applications in combating social engineering, ultimately contributing to the fortification of information systems against human-centric vulnerabilities.