How common is social engineering? Should I be worried about an attack?