In today's connected world, social media and the internet have made new forms of communication possible. This worldwide link includes, among other things, tweets, the sharing of photos, images, likes, and comments. Modern web-based social engineering (SE) assaults mislead users into downloading malware and disclosing personal information by preying on their psychological weaknesses. By enticing individuals to download hazardous software, click on malicious websites, or transfer malicious files and computer code. This paper goes into extensive insight about the threats, possible attacks, and various social media attacks.