To do this, social engineers sometimes send misleading...

To do this, social engineers sometimes send misleading messages to try to trick users into running a malicious attachment. Or they will try to get users to connect to a spoofed Web site. This could allow the perpetrator to obtain confidential information.