Browse/search for people

Publication - Dr Emma Williams

    Exploring susceptibility to phishing in the workplace

    Citation

    Williams, EJ, Hinds, J & Joinson, A, 2018, ‘Exploring susceptibility to phishing in the workplace’. International Journal of Human-Computer Studies, vol 120., pp. 1-13

    Abstract

    Phishing emails provide a means to infiltrate the technical systems of organisations by encouraging employees to click on malicious links or attachments. Despite the use of awareness campaigns and phishing simulations, employees remain vulnerable to phishing emails. The present research uses a mixed methods approach to explore employee susceptibility to targeted phishing emails, known as spear phishing. In study one, nine spear phishing simulation emails sent to 62,000 employees over a six-week period were rated according to the presence of authority and urgency influence techniques. Results demonstrated that the presence of authority cues increased the likelihood that a user would click a suspicious link contained in an email. In study two, six focus groups were conducted in a second organisation to explore whether additional factors within the work environment impact employee susceptibility to spear phishing. We discuss these factors in relation to current theoretical approaches and provide implications for user communities.

    Full details in the University publications repository