Factors Affecting Phishing Susceptibility

Abstract

As electronic devices become more commonplace and web, mobile, and social media technologies continue to advance, cybersecurity is becoming a more crucial topic. Phishing is one typical attack vector that uses human weaknesses as opposed to system weaknesses. All cybersecurity systems rely on human judgment, which is frequently attributed as the weakest link. With an emphasis on email phishing assaults in a business setting, this literature review investigates the numerous elements that affect the likelihood of a successful phishing attack. It was discovered that workplace characteristics, such as the degree of trust in the business and the level of technical understanding of the workers, as well as phishing attack tactics, such as the use of urgent language or threats, were found to impact vulnerability. Additionally, technical approaches, such as disguised links are used to further increase the likelihood of a successful phishing attack. Studies that looked at the effectiveness of anti-phishing training in lowering susceptibility found that more regular and interactive training may be more beneficial. To successfully lower phishing susceptibility, the findings of this literature review emphasize the significance of a variety of preventative strategies, including both technical and human-centred approaches. To further understand how various factors affect phishing susceptibility and the best ways to mitigate it, more research is required.