Understanding Social Engineering Attacks and What to Do About Them