Presenting Suspicious Details in User-Facing E-mail Headers Does Not Improve...
summary
Between-subjects experiment shows a representative Prolific sample sees 32 legitimate and 8 phishing emails under three display conditions (full message, headers-only, headerless). Participants act as executive assistants choosing discard or escalate; phishing detection is under 30% for most items and is worst in the headers-only condition. URL hovering is rare and unhelpful, and demographic, personality, or self-rated security measures fail to predict who detects phishing. less than 30% detection hovering over URLs rarely used
AI-written summary · about
related talks
05mKnowledge and Capabilities that Non-Expert Users Bring to Phishing Detection
16mChecking, nudging or scoring? Evaluating e-mail user security tools
27mBlunting the Phisher's Spear: A Risk-Based Approach...
20mDissecting Spear Phishing Emails for Older vs Young Adults: On the Interplay of Weapons of ...
53mRisk Profiles: Why Some Employees Attract Danger and Others Dodge It
41mHook, Line, & Sinker - Addressing the Human Risk of Phishing and How to Avoid the Bait
05mAn investigation of phishing awareness and education over time: When and how to best
42mPhishing With a Net: The NIST Phish Scale and Cybersecurity Awareness