Exploiting personality traits in social engineering attacks