Abstract:<p>In the phishing email literature, recent researchers have given much attention to individual differences in phishing susceptibility from the perspective of the Big Five personality traits. Although the effectiveness and advantages of the phishing susceptibility measures in the signal detection theory (SDT) framework have been verified, the cognitive mechanisms that lead to individual differences in these measures remain unknown. The current study proposed and examined a theoretical path model to explore how the Big Five personality traits, related knowledge and experience and the cognitive processing of emails (i.e., mail elaboration) influence users' susceptibility to phishing emails. A sample of 414 Chinese participants completed the 44-item Big Five Personality Inventory (BFI-44), Mail Elaboration Scale (MES), Web Experience Questionnaire, Experience with Electronic Mail Scale, Knowledge and Technical Background Test and a demographic questionnaire. The phishing susceptibility measures were calculated after the participants finished an email legitimacy task in a role-playing scenario. The results showed that the general profile of the "victim personality" included low conscientiousness, low openness and high neuroticism, and Internet experience and computer and web knowledge played an important role. All of these factors have significant indirect effects on phishing susceptibility by influencing mail elaboration. Moreover, the probabilities of checking for further information or deleting the email reflect the sensitivity of email judgment. These findings reveal the mediating role of cognitive processing between individual factors and phishing susceptibility. The theoretical implications of this study for the phishing susceptibility literature and its applications to phishing risk interventions or training programs are discussed.</p>

Business Email Compromise (BEC) and Cyberpsychology

An application of cyberpsychology in business email compromise

BEC Defender: QR Code-Based Methodology for Prevention of Business Email Compromise (BEC) Attacks

Exploring Cybercriminal Activities, Behaviors and Profiles

A Modular and Adaptive System for Business Email Compromise Detection

The Social and Psychological Impact of Cyber-Attacks

Recent trends in Social Engineering Scams and Case study of Gift Card Scam

Targeted Attacks: Redefining Spear Phishing and Business Email Compromise

Eyes on the Phish(er): Towards Understanding Users' Email Processing Pattern and Mental Models in Phishing Detection

Characterizing the Evolution of Psychological Tactics and Techniques Exploited by Malicious Emails

The Phishing Email Suspicion Test (PEST) a lab-based task for evaluating the cognitive mechanisms of phishing detection

Characterizing the Evolution of Psychological Factors Exploited by Malicious Emails

How personal characteristics impact phishing susceptibility: The mediating role of mail processing

Human Cognition through the Lens of Social Engineering Cyberattacks

Cyberpsychology: A Longitudinal Analysis of Cyber Adversarial Tactics and Techniques

Internet-Based Social Engineering Psychology, Attacks, and Defenses: A Survey

Dangers of succumbing to bias in cyber security : An evaluation of the impact of cognitive biases on threat assessments and cyber security strategies

A Key Point in Scam Compliance and Warning Compliance in Real Life

Beyond Technical Barriers: A Multidimensional Conceptual Framework for Understanding and Countering Cyber Scam Susceptibility

Quantifying Psychological Sophistication of Malicious Emails

Phishing - A Growing Threat to E-Commerce