Nudged to Click: How Social Engineering Exploits Human Behavior in Cybersecurity