Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing

Fudong Li
  • Fonction : Auteur
  • PersonId : 1239911
David Williams
  • Fonction : Auteur
  • PersonId : 1239912

Résumé

Short Message Service (SMS) messaging plays a key role in many people’s lives, allowing communication between friends, family and businesses through the convenient use of a mobile phone. At the same time, criminals are able to utilise this technology to their own benefit, such as by sending phishing messages that convince their victims into sharing sensitive information or installing dangerous software on their devices. Indeed, Proofpoint’s State of the Phish report found 81% of surveyed US organisations had faced smishing attacks – which is a type phishing attack via SMS message in 2020.Although phishing is well studied, the amount of research in SMS-based phishing is somewhat limited. Therefore, this study addresses the lack of SMS-based phishing insight, investigating which techniques/tactics are used by malicious senders and honest recipients to disguise/identify SMS-based phishing. By using an online questionnaire, a total of 576 participants’ options upon 20 text messages (10 genuine and 10 phishing) were gathered. The result shows 73.4% of the SMS messages were categorised correctly; also a number of factors such as shortened URLs, inconsistent metadata/content, urgency cue, and age play a positive role in identifying phishing attacks.
Fichier principal
Vignette du fichier
509924_1_En_13_Chapter.pdf (1007.82 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04041081 , version 1 (22-03-2023)

Licence

Paternité

Identifiants

Citer

Max Clasen, Fudong Li, David Williams. Friend or Foe: An Investigation into Recipient Identification of SMS-Based Phishing. 15th International Symposium on Human Aspects of Information Security and Assurance (HAISA), Jul 2021, Virtual, United Kingdom. pp.148-163, ⟨10.1007/978-3-030-81111-2_13⟩. ⟨hal-04041081⟩
10 Consultations
14 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More