Tag social engineering attack detection