Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing - Human Aspects of Information Security and Assurance Access content directly
Conference Papers Year : 2021

Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing

Fudong Li
  • Function : Author
  • PersonId : 1239911
David Williams
  • Function : Author
  • PersonId : 1239912

Abstract

Short Message Service (SMS) messaging plays a key role in many people’s lives, allowing communication between friends, family and businesses through the convenient use of a mobile phone. At the same time, criminals are able to utilise this technology to their own benefit, such as by sending phishing messages that convince their victims into sharing sensitive information or installing dangerous software on their devices. Indeed, Proofpoint’s State of the Phish report found 81% of surveyed US organisations had faced smishing attacks – which is a type phishing attack via SMS message in 2020.Although phishing is well studied, the amount of research in SMS-based phishing is somewhat limited. Therefore, this study addresses the lack of SMS-based phishing insight, investigating which techniques/tactics are used by malicious senders and honest recipients to disguise/identify SMS-based phishing. By using an online questionnaire, a total of 576 participants’ options upon 20 text messages (10 genuine and 10 phishing) were gathered. The result shows 73.4% of the SMS messages were categorised correctly; also a number of factors such as shortened URLs, inconsistent metadata/content, urgency cue, and age play a positive role in identifying phishing attacks.
Fichier principal
Vignette du fichier
509924_1_En_13_Chapter.pdf (1007.82 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-04041081 , version 1 (22-03-2023)

Licence

Attribution

Identifiers

Cite

Max Clasen, Fudong Li, David Williams. Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing. 15th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2021, Virtual, United Kingdom. pp.148-163, ⟨10.1007/978-3-030-81111-2_13⟩. ⟨hal-04041081⟩
10 View
11 Download

Altmetric

Share

Gmail Facebook X LinkedIn More