The aim of this study is to conduct an explorative investigation of the phenomenon of social engineering 2.0, through the following three objectives: (1) the execution of real-life simulations of social engineering 2.0 attacks against three Danish companies; (2) to raise awareness among key organisations and actors; (3) and to provide a framework to mitigate the associated risks of social engineering, on the basis of our findings.