Clemson University, Clemson, SC.
Hum Factors. 2024 Jun;66(6):1742-1753. doi: 10.1177/00187208231173263. Epub 2023 May 1.
The present study investigated if the same users are vulnerable to phishing emails, scam text messages, and fake news headlines and if there are universal predictors of susceptibility for all three tasks.
Theoretical research provides support for the notion that the same users likely fall for multiple forms of online deception. However, no research has directly compared susceptibility for various online deceptions (eg phishing, disinformation, scam text messages) within the same group of users.
Participants completed an online survey consisting of demographic questions, the Cognitive Reflection Test (ie impulsivity), and the Digital Literacy Scale, and classified 90 legitimate and deceptive emails, text messages, and news headlines.
Results suggest that individuals who struggle to discriminate between deceptive and legitimate stimuli on one task experience similar difficulties on the other two tasks. Additionally, while lower levels of digital literacy and cognitive reflectiveness predicted poorer discrimination abilities across all three tasks, age did not predict performance. Interestingly, participants appeared to be the most susceptible to phishing emails.
Overall, individuals who fall for one form of online deception appear to be more likely to fall for other forms of deception, and digital literacy and cognitive reflectiveness can predict widespread vulnerability to online deception.
Organizations may be able to identify potential vulnerabilities for a variety of online attacks by measuring digital literacy, cognitive reflectiveness, and performance in one online deception task. Additionally, training interventions may be the most needed for phishing emails.
本研究旨在调查同一用户是否容易受到网络钓鱼邮件、诈骗短信和虚假新闻标题的影响,以及是否存在普遍的易感性预测因素,可以适用于所有这三种任务。
理论研究支持这样一种观点,即同一用户可能会多次受到网络欺骗的影响。然而,还没有研究直接比较同一组用户对各种在线欺骗(如网络钓鱼、虚假信息、诈骗短信)的易感性。
参与者完成了一项在线调查,其中包括人口统计问题、认知反射测试(即冲动性)和数字素养量表,并对 90 个合法和欺骗性的电子邮件、短信和新闻标题进行了分类。
结果表明,在一项任务中难以区分欺骗性和合法性刺激的个体,在其他两项任务中也会遇到类似的困难。此外,虽然较低的数字素养和认知反思能力预测了所有三项任务的较差区分能力,但年龄并不能预测表现。有趣的是,参与者似乎对网络钓鱼邮件最为敏感。
总体而言,容易受到一种形式的网络欺骗的个体似乎更容易受到其他形式的欺骗,数字素养和认知反思能力可以预测对网络欺骗的普遍易感性。
通过测量数字素养、认知反思能力和一项网络欺骗任务的表现,组织可能能够识别出各种网络攻击的潜在弱点。此外,网络钓鱼邮件可能最需要培训干预。