So… this is a matter of definitions.
We define social engineering (SE) as “any act that influences a person to take an action that may or may not be in their best interest.”
Using a keylogger embedded in a physical device, or the process of getting a user to install a keylogger are both related to SE in my opinion. But what about when an adversary has gained access to a machine over a network and installed a keylogger on the victim's machine. In this case I fail to see how the victim has been SE'd to give their credentials, as the compromise is not due to a victim's action.
Would you use SE to describe the attack in this case, or am I missing a descriptive term for this type of attack?