A social engineering attack is a manipulative technique used by attackers to exploit human psychology and deceive individuals into revealing sensitive information or performing actions that compromise security. It can involve impersonation, deception, or psychological manipulation.