...Marcus Nohlberg; Philipp Schrefel Purpose Social engineering remains a major threat to information security, not due to technical skill but by exploiting human behavior. While research has examined user susceptibility and awareness training, less is known about how attackers develop skills in real...

...Anna Lena Fehlhaber Purpose This study aims to investigate the conditions under which people are inclined to engage with social engineering propositions. Using the contributions of Prospect Theory, the role of individual utility evaluations and risk perception were examined. Design/methodology...

... over a ten-year period from the phishing database. The analysis employed NVivo software, guided by the Principles of Human Persuasion in Social Engineering framework proposed by Ferreira and Teles (2019). This framework facilitated systematic coding based on five main principles (Authority, Social...

...Aya Muhanad; Tourjana Islam Supti; Israa Abuelezz; Ala Yankouskaya; Khaled M. Khan; Mahmoud Barhamgi; Armstrong Nhlabatsi; Raian Ali Purpose This study aims to investigate whether an individual’s security attitude (SA) predicts susceptibility to persuasion in social engineering (SE) attempts...

...Israa Abuelezz; Mahmoud Barhamgi; Armstrong Nhlabatsi; Khaled Md. Khan; Raian Ali Purpose The aim of this study is to investigate how the demographics and appearance cues of potential social engineers influence the likelihood that targets will trust them and accept security risk. Design...

...Keith S. Jones; McKenna K. Tornblad; Miriam E. Armstrong; Jinwoo Choi; Akbar Siami Namin Purpose This study aimed to investigate how honest participants perceived an attacker to be during shoulder surfing scenarios that varied in terms of which Principle of Persuasion in Social Engineering (PPSE...

...Lily Pharris; Begona Perez-Mira Purpose The purpose of this transcendental phenomenological qualitative research study is to understand the essence of what it is like to be an information systems professional working in the USA while managing and defending against social engineering attacks...

... attacks in the presence of social engineering strategies. The results suggest heightened awareness of phishing threats and responsibility to personal cybersecurity are key to ensuring secure business environments. Originality/value The authors extend existing phishing literature by investigating...

...Keith S. Jones; Miriam E. Armstrong; McKenna K. Tornblad; Akbar Siami Namin Purpose This study aims to examine how social engineers use persuasion principles during vishing attacks. Design/methodology/approach In total, 86 examples of real-world vishing attacks were found in articles...

...Jan-Willem Bullee; Marianne Junger Purpose Social engineering is a prominent aspect of online crime. Various interventions have been developed to reduce the success of this type of attacks. This paper aims to investigate if interventions can help to decrease the vulnerability to social engineering...

... a systematic literature review of academic research, a review of actual hacker techniques, industry recommendations and official body advice related to social engineering techniques. To meet the requirements to have an ethical human pentesting framework, the authors compiled a list of ethical principles from...

... be contacted at: kskuppu@gmail.com 11 12 2017 28 03 2018 23 05 2018 11 06 2018 © Emerald Publishing Limited 2018 Emerald Publishing Limited Licensed re-use rights only Phishing Social engineering Cyber-crime Phoneme domains Typosquatting World Wide Web serves...

...Peter Schaab; Kristian Beckers; Sebastian Pape Purpose This paper aims to outline strategies for defence against social engineering that are missing in the current best practices of information technology (IT) security. Reason for the incomplete training techniques in IT security...

.... Findings – Intention to resist social engineering, general information security awareness, formal IS training and computer experience were identified to have a positive significant correlation to phishing resilience. Furthermore, the results showed that the correlation between phishing determinants...

... could be improved, and also refined the measurement instrument. © Emerald Group Publishing Limited 2014 Experiment Phishing Social engineering Security behaviour Survey method The increased effectiveness and robustness of technical security components has made it more difficult...

...Veniamin Ginodman; Natalya Obelets; Ram Herkanaidu; Iwan Gulenko Purpose This study attempts to develop an efficient concept to mitigate the risks of social engineering in the era of social networks. For instance friend requests on Facebook are often accepted blindly, thus granting unknown people...

... both social engineering and technical subterfuge to steal consumers' personal identity data and financial account credentials (Anti‐phishing_Working_Group, 2010) such as usernames, passwords, bank account and credit card details to enable the sender to obtain money fraudulently. These types of e‐mails...