A defender-focused guide to stopping sophisticated, multi-stage social engineering attacks

Social engineering accounts for approximately 70%-90% of successful cyberattacks, yet most defense guidance still relies on outdated threat models and basic awareness training. Social Engineering in the Age of Advanced Threats moves beyond classic phishing and vishing to examine sophisticated, multi-stage attack campaigns, including AI-augmented operations. Written by Christina Lekati, a social engineering security consultant who trains Fortune 500 organizations, law enforcement, and military units, this book combines cybersecurity with psychology and strategic threat analysis.

Lekati draws on real-world case studies to show how attacks are conceived, planned, and executed against organizations and high-value individuals. The book delivers practical tools and recommendations for building organizational resilience, covering OSINT-based vulnerability assessments, behavioral threat analysis, profiling and modus operandi analysis, and counterintelligence-informed defense strategies. Each case study pairs the attacker's psychological tactics with concrete defensive countermeasures, giving security teams actionable frameworks they can deploy immediately.

Readers will also find:

• Psychological analysis of attacker-target dynamics, including manipulation techniques, decision-making exploitation, and deceit mechanisms used in real-world operations
• Defense strategies that address AI-augmented social engineering campaigns targeting both digital and physical security perimeters of organizations
• Real-world case studies demonstrating how multi-stage social engineering attacks unfold from initial reconnaissance through successful compromise of targets
• OSINT assessment methodologies for identifying and managing security risks facing both organizations and high-value individuals in current threat environments
• Practical recommendations for building security awareness programs that reflect current and evolving threat landscapes rather than outdated training models

Written for CISOs, CTOs, penetration testers, red teamers, intelligence professionals, law enforcement, military personnel, and physical security practitioners, this book equips defenders with the psychological insights and strategic frameworks needed to detect, disrupt, and prevent the human-centric attacks that bypass traditional technical controls.