With the booming popularity of smartphones, threats related to these devices are increasingly on the rise. Smishing, a combination of SMS (Short Message Service) and phishing has emerged as a treacherous cyber threat used by malicious actors to deceive users, aiming to steal sensitive information, money or install malware on their mobile devices. Despite the increase in smishing attacks in recent years, there are very few studies aimed at understanding the factors that contribute to a user's ability to differentiate real from fake messages. To address this gap in knowledge, we have conducted an online survey on smishing detection with 214 participants. In this study, we presented them with 16 SMS screenshots and evaluated how different factors affect their decision making process in smishing detection. Next, we conducted a follow-up survey to garner information on the participants' security attitudes, behavior and knowledge. Our results highlighted that attention and security behavioral scores had a significant impact on participants' accuracy in identifying smishing messages. Interestingly, we found that participants had more difficulty identifying real messages from fake ones, with an accuracy of 65.6% with fake messages and 44.6% with real messages. Our study is crucial in developing proactive strategies to encounter and mitigate smishing attacks. By understanding what factors influence smishing detection, we aim to bolster users' resilience against such threats and create a safer digital environment for all.
翻译:随着智能手机的普及,与之相关的安全威胁日益增加。短信诈骗(Smishing)是短信服务(SMS)与网络钓鱼的结合,已成为恶意行为者欺骗用户、窃取敏感信息、钱财或在用户移动设备上安装恶意软件的严重网络威胁。尽管近年来短信诈骗攻击有所增加,但探讨用户区分真实与虚假信息影响因素的研究仍相当匮乏。为填补这一知识空白,我们开展了一项包含214名参与者的在线短信诈骗检测调查。研究中,我们向参与者展示了16张短信截图,评估了不同因素对其辨别短信诈骗决策过程的影响。随后,我们通过二次调查收集了参与者的安全态度、行为及知识水平。结果显示,注意力水平与安全行为评分对参与者识别短信诈骗的准确性有显著影响。有趣的是,我们发现参与者在区分真实与虚假信息时面临更大困难——对虚假信息的识别准确率为65.6%,而对真实信息的识别准确率仅为44.6%。本研究对于制定主动应对并缓解短信诈骗攻击的策略至关重要。通过理解影响短信诈骗检测的关键因素,我们旨在增强用户抵御此类威胁的能力,为所有人营造更安全的数字环境。