Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links

Rufai Ahmad; Sotirios Terzis

doi:10.1007/978-3-031-12172-2_15

Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links

Rufai Ahmad, Sotirios Terzis

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

5 Citations (Scopus)

126 Downloads (Pure)

Abstract

In recent years, users of Mobile Instant Messaging (MIM) apps like WhatsApp and Telegram are being targeted by phishing attacks. While user susceptibility to phishing in other media is well studied, the literature currently lacks studies on phishing susceptibility in MIM apps. This paper presents a study that offers the first insights into the susceptibility of users of MIM apps to phishing by investigating their behaviour towards shared links. Using an online survey, we collected data from 111 users of MIM apps and found that participants frequently click and forward links during instant messaging, while factors such as the user’s relationship with the sender and the group context of the communication influence these behaviours. The results show that behaviours of most users towards shared links try to reduce their risk to phishing by trusting their friends, family and colleagues to protect them. This raises some interesting questions for further research on the effectiveness and reliability of their strategy.

Original language	English
Title of host publication	Human Aspects of Information Security and Assurance
Subtitle of host publication	16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings
Editors	Nathan Clarke, Steven Furnell
Place of Publication	Cham, Switzerland
Publisher	Springer
Pages	197-206
Number of pages	10
ISBN (Electronic)	9783031121722
ISBN (Print)	9783031121715
DOIs	https://doi.org/10.1007/978-3-031-12172-2_15
Publication status	Published - 22 Jul 2022
Event	16th International Symposium on Human Aspects of Information Security & Assurance- Heliotrope Hotel, Mytilene, Greece - Heliotrope Hotel, Mytilene, Greece Duration: 6 Jul 2022 → 7 Jul 2022 Conference number: 16th https://haisa.org/

Publication series

Name	IFIP Advances in Information and Communication Technology (IFIPAICT)
Publisher	Springer Cham
Number	1
Volume	658
ISSN (Print)	1868-4238
ISSN (Electronic)	1868-422X

Conference

Conference	16th International Symposium on Human Aspects of Information Security & Assurance- Heliotrope Hotel, Mytilene, Greece
Abbreviated title	HAISA 2022
Country/Territory	Greece
City	Mytilene
Period	6/07/22 → 7/07/22
Internet address	https://haisa.org/

Keywords

mobile instant messaging
mobile phishing
phishing

Access to Document

10.1007/978-3-031-12172-2_15

Ahmad-Terzis-HAISA2022-Understanding-phishing-in-mobile-instant-messagingAccepted author manuscript, 726 KBLicence: Strath_1

Content analysis of persuasion principles in mobile instant message phishing
Ahmad, R., Terzis, S. & Renaud, K., 26 Jul 2023, Human Aspects of Information Security & Assurance: 17th International Symposium on Human Aspects of Information Security & Assurance. Furnell, S. & Clarke, N. (eds.). Cham, Switzerland: Springer, p. 324-336 13 p. (IFIP Advances in Information and Communication Technology; vol. 674).
Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book
2 Citations (Scopus)
Investigating mobile instant messaging phishing: a study into user awareness and preventive measures
Ahmad, R., Terzis, S. & Renaud, K., 9 Jul 2023, HCI for Cybersecurity, Privacy and Trust: 5th International Conference on HCI for Cybersecurity, Privacy and Trust. Moallem, A. (ed.). Cham, Switzerland: Springer, p. 381-398 18 p.
Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

Open Access
File
1 Citation (Scopus)

49 Downloads (Pure)

Cite this

Ahmad, R., & Terzis, S. (2022). Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links. In N. Clarke, & S. Furnell (Eds.), Human Aspects of Information Security and Assurance: 16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings (pp. 197-206). (IFIP Advances in Information and Communication Technology (IFIPAICT); Vol. 658, No. 1). Springer. https://doi.org/10.1007/978-3-031-12172-2_15

Ahmad, Rufai ; Terzis, Sotirios. / Understanding phishing in mobile instant messaging : a study into user behaviour toward shared links. Human Aspects of Information Security and Assurance: 16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings. editor / Nathan Clarke ; Steven Furnell. Cham, Switzerland : Springer, 2022. pp. 197-206 (IFIP Advances in Information and Communication Technology (IFIPAICT); 1).

@inproceedings{44d9b5ed11924664ac3bfa429a6fc773,

title = "Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links",

abstract = "In recent years, users of Mobile Instant Messaging (MIM) apps like WhatsApp and Telegram are being targeted by phishing attacks. While user susceptibility to phishing in other media is well studied, the literature currently lacks studies on phishing susceptibility in MIM apps. This paper presents a study that offers the first insights into the susceptibility of users of MIM apps to phishing by investigating their behaviour towards shared links. Using an online survey, we collected data from 111 users of MIM apps and found that participants frequently click and forward links during instant messaging, while factors such as the user{\textquoteright}s relationship with the sender and the group context of the communication influence these behaviours. The results show that behaviours of most users towards shared links try to reduce their risk to phishing by trusting their friends, family and colleagues to protect them. This raises some interesting questions for further research on the effectiveness and reliability of their strategy.",

keywords = "mobile instant messaging, mobile phishing, phishing",

author = "Rufai Ahmad and Sotirios Terzis",

year = "2022",

month = jul,

day = "22",

doi = "10.1007/978-3-031-12172-2\_15",

language = "English",

isbn = "9783031121715",

series = "IFIP Advances in Information and Communication Technology (IFIPAICT)",

publisher = "Springer",

number = "1",

pages = "197--206",

editor = "Clarke, \{Nathan \} and Steven Furnell",

booktitle = "Human Aspects of Information Security and Assurance",

note = "16th International Symposium on Human Aspects of Information Security \& Assurance- Heliotrope Hotel, Mytilene, Greece, HAISA 2022 ; Conference date: 06-07-2022 Through 07-07-2022",

url = "https://haisa.org/",

}

Ahmad, R & Terzis, S 2022, Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links. in N Clarke & S Furnell (eds), Human Aspects of Information Security and Assurance: 16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings. IFIP Advances in Information and Communication Technology (IFIPAICT), no. 1, vol. 658, Springer, Cham, Switzerland, pp. 197-206, 16th International Symposium on Human Aspects of Information Security & Assurance- Heliotrope Hotel, Mytilene, Greece, Mytilene, Greece, 6/07/22. https://doi.org/10.1007/978-3-031-12172-2_15

Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links. / Ahmad, Rufai ; Terzis, Sotirios.
Human Aspects of Information Security and Assurance: 16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings. ed. / Nathan Clarke; Steven Furnell. Cham, Switzerland: Springer, 2022. p. 197-206 (IFIP Advances in Information and Communication Technology (IFIPAICT); Vol. 658, No. 1).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution book

TY - GEN

T1 - Understanding phishing in mobile instant messaging

T2 - 16th International Symposium on Human Aspects of Information Security & Assurance- Heliotrope Hotel, Mytilene, Greece

AU - Ahmad, Rufai

AU - Terzis, Sotirios

N1 - Conference code: 16th

PY - 2022/7/22

Y1 - 2022/7/22

N2 - In recent years, users of Mobile Instant Messaging (MIM) apps like WhatsApp and Telegram are being targeted by phishing attacks. While user susceptibility to phishing in other media is well studied, the literature currently lacks studies on phishing susceptibility in MIM apps. This paper presents a study that offers the first insights into the susceptibility of users of MIM apps to phishing by investigating their behaviour towards shared links. Using an online survey, we collected data from 111 users of MIM apps and found that participants frequently click and forward links during instant messaging, while factors such as the user’s relationship with the sender and the group context of the communication influence these behaviours. The results show that behaviours of most users towards shared links try to reduce their risk to phishing by trusting their friends, family and colleagues to protect them. This raises some interesting questions for further research on the effectiveness and reliability of their strategy.

AB - In recent years, users of Mobile Instant Messaging (MIM) apps like WhatsApp and Telegram are being targeted by phishing attacks. While user susceptibility to phishing in other media is well studied, the literature currently lacks studies on phishing susceptibility in MIM apps. This paper presents a study that offers the first insights into the susceptibility of users of MIM apps to phishing by investigating their behaviour towards shared links. Using an online survey, we collected data from 111 users of MIM apps and found that participants frequently click and forward links during instant messaging, while factors such as the user’s relationship with the sender and the group context of the communication influence these behaviours. The results show that behaviours of most users towards shared links try to reduce their risk to phishing by trusting their friends, family and colleagues to protect them. This raises some interesting questions for further research on the effectiveness and reliability of their strategy.

KW - mobile instant messaging

KW - mobile phishing

KW - phishing

U2 - 10.1007/978-3-031-12172-2_15

DO - 10.1007/978-3-031-12172-2_15

M3 - Conference contribution book

SN - 9783031121715

T3 - IFIP Advances in Information and Communication Technology (IFIPAICT)

SP - 197

EP - 206

BT - Human Aspects of Information Security and Assurance

A2 - Clarke, Nathan

A2 - Furnell, Steven

PB - Springer

CY - Cham, Switzerland

Y2 - 6 July 2022 through 7 July 2022

ER -

Ahmad R , Terzis S. Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links. In Clarke N, Furnell S, editors, Human Aspects of Information Security and Assurance: 16th IFIP WG 11.12 International Symposium, HAISA 2022, Proceedings. Cham, Switzerland: Springer. 2022. p. 197-206. (IFIP Advances in Information and Communication Technology (IFIPAICT); 1). doi: 10.1007/978-3-031-12172-2_15

Understanding phishing in mobile instant messaging: a study into user behaviour toward shared links

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Research output

Content analysis of persuasion principles in mobile instant message phishing

Investigating mobile instant messaging phishing: a study into user awareness and preventive measures

Cite this