Susceptibility of Nigerian Undergraduate Students to Social Engineering and Phishing Attacks
CHAPTER ONE
Objective of the Study
The main objective of this study is to assess the susceptibility of Nigerian undergraduate students to social engineering and phishing attacks. Specific objectives include:
- To evaluate the level of awareness and understanding of social engineering and phishing attacks among Nigerian undergraduate students.
- To identify the primary factors that contribute to the susceptibility of Nigerian undergraduate students to social engineering and phishing attacks.
- To analyze the impact of susceptibility to social engineering and phishing attacks on the academic performance of Nigerian undergraduate students.
- To determine the effectiveness of current educational and preventive measures in reducing susceptibility to social engineering and phishing attacks among Nigerian undergraduate students.
CHAPTER TWO
LITERATURE REVIEW
Conceptual Review
Phishing Attacks
Phishing attacks are a common and evolving cybersecurity threat, defined as fraudulent attempts to deceive individuals into divulging sensitive information, such as passwords or financial details, by impersonating trustworthy entities in electronic communication (Jagatic, Johnson, Jakobsson, & Menczer, 2023). These attacks are pervasive due to their simplicity and effectiveness, relying heavily on social engineering tactics that exploit human psychology. The ubiquity of phishing makes it a critical concern for individuals, organizations, and cybersecurity experts, who must continuously adapt to counter these evolving threats.
The methods employed in phishing attacks have diversified significantly, moving beyond traditional email scams to encompass other digital platforms such as social media, messaging applications, and even video conferencing tools (Basit et al., 2021). This diversification allows attackers to cast a wider net and tailor their schemes to different demographics, increasing their chances of success. For example, attackers may use deepfake technology or spoofed websites to mimic legitimate entities, further complicating detection and mitigation efforts. The growing sophistication of these tactics underscores the need for robust cybersecurity measures that address emerging vulnerabilities.
Phishing’s relevance lies in its significant impact on both individuals and organizations, particularly as digital transformation continues to expand. In financial terms, phishing attacks cause billions of dollars in losses annually and expose organizations to reputational risks and legal liabilities (Azeez, Misra, Margaret, & Fernandez-Sanz, 2021). Beyond financial harm, phishing can disrupt critical systems, compromise sensitive data, and erode public trust in online platforms. This is especially pertinent in sectors like healthcare, education, and government, where data breaches can have life-altering consequences. Consequently, cybersecurity education and awareness programs play an indispensable role in mitigating phishing risks.
Despite advances in phishing detection, significant limitations remain, especially in the context of spear-phishing attacks, which are highly targeted and personalized (Eftimie, Moinescu, & Răcuciu, 2022). Unlike generic phishing schemes, spear-phishing leverages specific information about a target to craft convincing messages, often bypassing automated detection systems. For instance, attackers may exploit publicly available data from social media to create messages that appear authentic and personalized. As a result, traditional detection approaches, such as keyword-based filtering, are insufficient against these sophisticated tactics, necessitating the development of more advanced solutions like machine learning algorithms.
Another critical critique of phishing defences is their reliance on reactive rather than proactive measures. Current strategies often detect phishing only after an attack has been launched, limiting their effectiveness in preventing initial breaches (Jain & Gupta, 2022). Proactive measures, such as phishing simulations and real-time behavioural analytics, are crucial to preempting these attacks. For example, organizations can deploy simulated phishing campaigns to train employees, helping them recognize and report suspicious activity before damage occurs. Similarly, real-time analytics can identify anomalies in user behaviour, such as atypical login patterns, providing early warnings of potential phishing attempts.
Interestingly, the susceptibility to phishing attacks varies widely among individuals, influenced by factors such as age, gender, and digital literacy (Daengsi, Pornpongtechavanich, & Wuttidittachotti, 2022). Studies show that younger individuals and those with less cybersecurity awareness are more likely to fall victim to phishing. However, even experienced users can be deceived by highly sophisticated attacks, highlighting the importance of continuous education and adaptive defences. These findings suggest that tailored cybersecurity training programs, addressing specific vulnerabilities within different demographic groups, could enhance overall resilience against phishing.
CHAPTER THREE
METHODOLOGY
Research Design
The research design for this study adopted a cross-sectional survey research design, chosen for its capacity to systematically collect, measure, and analyze data at a single point in time. This design provided a comprehensive framework for investigating the prevalence of cybersecurity vulnerabilities among Nigerian undergraduate students and assessing their impact on academic performance. The cross-sectional approach was particularly suited for this study because it facilitated the collection of numerical data that could be subjected to statistical analysis, allowing for precise measurement of relationships and outcomes (Saunders, Lewis, & Thornhill, 2019).
By employing a cross-sectional survey research design, the study aimed to quantify various aspects of cybersecurity awareness and vulnerability among students. This design allowed for the collection of data from a large sample, which enhanced the generalizability of the findings across the population of Nigerian undergraduates. The structured questionnaire, a key component of this design, was utilized to gather data systematically. This approach ensured that all participants responded to the same set of questions, providing standardized information that could be directly compared and analyzed (Bell, Bryman, & Harley, 2019).
The use of a structured questionnaire facilitated the gathering of consistent and comparable data. The questionnaire was meticulously developed to include a range of questions that addressed various dimensions of cybersecurity, including awareness levels, perceived vulnerabilities, and engagement with protective practices. The structured nature of the questionnaire allowed for the collection of quantitative data, which was analyzed to identify patterns, correlations, and trends. This method of data collection was advantageous because it enabled researchers to handle large volumes of data efficiently and apply statistical techniques to derive meaningful insights.
Furthermore, the cross-sectional survey research design supported the identification of relationships between cybersecurity awareness and academic performance among Nigerian students. By analyzing the data collected through the structured questionnaire, the study was able to examine how different levels of cybersecurity awareness correlated with students’ experiences and challenges related to cybersecurity threats. This approach provided valuable insights into how vulnerabilities impacted academic performance and helped in understanding the broader implications of cybersecurity issues in the educational context.
Population of the Study
The target population for this study consisted of 1,200 Nigerian undergraduate students from various universities. This population was chosen due to their high engagement with digital platforms and their potential vulnerability to cyber threats. Frankfort-Nachmias, Nachmias, and DeWaard (2021) highlighted the increasing reliance on digital tools among students, making them a critical demographic for studying cybersecurity awareness and practices. Nigerian universities were selected for their progressive integration of digital resources into curricula, reflecting the relevance of this population for capturing insights into cybersecurity vulnerabilities and awareness.
CHAPTER FOUR
DATA PRESENTATION, ANALYSIS AND DISCUSSION
Data Presentation
Demographic Distribution of Respondents
CHAPTER FIVE
SUMMARY, CONCLUSION AND RECOMMENDATIONS
Summary of Findings
The study aimed to explore the awareness, susceptibility, and impact of phishing attacks and social engineering on Nigerian undergraduate students. Additionally, it sought to assess the effectiveness of institutional measures in mitigating the risks associated with these cybersecurity threats. The findings from the analysis offer valuable insights into how these factors influence students’ academic performance and security behaviours.
One of the primary objectives of the study was to gauge the level of awareness and understanding of social engineering and phishing attacks among Nigerian undergraduate students. The results revealed a generally high level of awareness, with a substantial proportion of students indicating that they could identify phishing emails and messages when they encountered them. Specifically, 47.3% of respondents strongly agreed, and 22.3% agreed with the statement that they can recognize phishing attempts. This finding is promising, as it suggests that many students possess a foundational understanding of phishing attacks, which is crucial in preventing such attacks from being successful. However, the study also uncovered a gap in practical knowledge, with 14.3% of respondents uncertain and 13.4% disagreeing with the statement. This highlights that while theoretical awareness exists, some students may lack the practical skills needed to recognize phishing attempts in real-world scenarios. This discrepancy between theoretical knowledge and practical ability indicates that awareness-raising efforts should go beyond just recognizing common phishing tactics to include more in-depth training and simulations that allow students to practice identifying these threats.
A critical aspect of the study was to examine the factors influencing students’ susceptibility to phishing attacks, such as their online behaviour and cybersecurity knowledge. The results highlighted that students who exhibited better cybersecurity knowledge and more responsible online behaviour were less likely to fall victim to phishing attacks. Specifically, 38.4% of respondents strongly agreed, and 29.5% agreed that their cybersecurity knowledge influenced their vulnerability to phishing. This finding aligns with the understanding that better cybersecurity knowledge can reduce susceptibility to attacks. However, a concerning 16.1% of respondents were uncertain, and 13.4% disagreed with the statement. This suggests that while cybersecurity knowledge is a critical protective factor, there may be other underlying influences at play, such as students’ attitudes, habits, and general skepticism regarding the risks of online threats. In addition, the study found that personal online behaviour, such as sharing personal information online, was a significant factor in susceptibility. As indicated by 43.8% of respondents who strongly agreed and 25.0% who agreed, the act of oversharing personal information online was identified as increasing the risk of falling victim to phishing and social engineering attacks. This finding underlines the importance of educating students about the dangers of oversharing personal data, especially on social media platforms.
The study also explored the role of public Wi-Fi networks in increasing the risk of phishing attacks. The findings were telling: 45.5% of respondents strongly agreed and 23.2% agreed that frequent use of public Wi-Fi networks heightened their vulnerability to phishing attacks. These findings echo established research on the security risks associated with public Wi-Fi networks, which are often unsecured and provide opportunities for attackers to intercept sensitive data. This result suggests a need for educational campaigns that emphasize the importance of avoiding public Wi-Fi for sensitive activities or utilizing Virtual Private Networks (VPNs) to enhance security.
Another key objective of the study was to assess the impact of phishing attacks on students’ academic performance. The findings revealed a strong correlation between phishing attacks and academic disruption. In Table 4.10, 41.1% of respondents strongly agreed, and 37.5% agreed that phishing attacks had negatively impacted their academic performance. The reasons for this negative impact varied but included issues such as missed deadlines, distraction from studies, and the time spent recovering from the consequences of a phishing attack. This finding suggests that phishing attacks not only affect students’ digital security but also have tangible academic consequences. As students are forced to deal with the aftermath of attacks, their ability to focus on coursework, meet deadlines, and participate in academic activities is compromised. This finding underscores the importance of cybersecurity measures in academic environments, as phishing attacks can have broader implications beyond financial losses or data breaches, affecting students’ academic success.
The study also aimed to assess the effectiveness of institutional measures, such as cybersecurity training and preventive alerts, in reducing the vulnerability of students to phishing attacks. The findings were largely positive in this regard. In Table 4.14, 42.9% of respondents strongly agreed, and 37.5% agreed that the cybersecurity training provided by their institution effectively increased their awareness of phishing attacks. Similarly, Table 4.16 revealed that 52.7% strongly agreed, and 37.5% agreed that the preventive measures implemented by the university, such as security alerts, were effective in protecting them from phishing attacks. These findings suggest that institutional efforts have been somewhat successful in mitigating the risks associated with phishing. However, there were still some respondents who disagreed with the effectiveness of these measures (13.4% in Table 4.14 and 7.1% in Table 4.16), indicating that there is room for improvement. Additional resources and support, such as more frequent and engaging workshops or real-time phishing simulations, might help bridge the gap and ensure that all students benefit from these initiatives.
Finally, the study investigated whether students felt that additional resources and support from their institution would help reduce their vulnerability to social engineering attacks. The results were strongly affirmative. In Table 4.17, 47.3% of respondents strongly agreed, and 37.5% agreed that additional resources and support would be beneficial. This finding underscores the need for continued efforts to equip students with the tools, resources, and knowledge necessary to protect themselves from social engineering attacks. It also points to the importance of a proactive approach by educational institutions in creating a culture of cybersecurity awareness and providing students with the support they need to stay safe online.
In summary, the findings from this study reveal that while there is a relatively high level of awareness and some protective behaviours among Nigerian undergraduate students regarding phishing and social engineering attacks, significant gaps remain. These gaps are particularly evident in practical knowledge, online behaviour, and susceptibility to attacks, all of which can negatively impact students’ academic performance. The study highlights the need for more effective and comprehensive cybersecurity education, as well as continued efforts by institutions to improve their preventive measures and provide additional resources to reduce students’ vulnerability to phishing and social engineering attacks.
Conclusion
Based on the results of the hypotheses tested, the study concluded that Nigerian undergraduate students’ susceptibility to phishing and social engineering attacks is significantly influenced by their awareness, online behaviour, and cybersecurity knowledge. The findings indicated that students with a higher level of awareness and understanding of these attacks are less likely to fall victim, supporting the hypothesis that increased awareness can reduce vulnerability. Moreover, factors such as responsible online behaviour and better cybersecurity knowledge were found to be protective against phishing attacks, which aligns with the second hypothesis that these factors significantly influence susceptibility.
Additionally, the study revealed a strong association between susceptibility to phishing attacks and students’ academic performance. Students who experienced phishing and social engineering attacks reported negative impacts on their academic activities, such as missing deadlines and losing focus on their studies. This supports the hypothesis that there is an association between susceptibility and academic performance, showing that the consequences of phishing attacks extend beyond digital security risks to affect students’ academic success.
Institutional measures, including cybersecurity training and preventive alerts, were found to be effective in raising awareness and reducing susceptibility. However, there is still room for improvement, as some students reported that these measures were not fully effective in protecting them. The hypothesis regarding the effectiveness of educational and preventive measures was partially supported, indicating the need for ongoing improvements in institutional cybersecurity efforts to better safeguard students from phishing attacks.
Overall, the study underscores the importance of strengthening cybersecurity education, improving preventive measures, and addressing the factors that contribute to students’ vulnerability to phishing and social engineering attacks. These efforts are essential for mitigating the impact of such attacks on students’ academic performance and overall digital security.
Implications of the Findings
The findings from this study have significant implications for various stakeholders, including educational institutions, policymakers, cybersecurity experts, and students themselves. Understanding the susceptibility of Nigerian undergraduate students to phishing and social engineering attacks and the factors that influence this vulnerability is crucial in addressing the growing digital security challenges faced by the student population. This section outlines the implications of the study’s findings for cybersecurity strategies, academic institutions, and student behaviour.
First, the study highlights the critical role that awareness and understanding of social engineering and phishing attacks play in reducing students’ susceptibility to such attacks. Educational institutions must prioritize raising awareness among students about the risks associated with online activities and the tactics used by cybercriminals. The findings suggest that students with higher levels of awareness and knowledge about phishing attacks are less likely to fall victim to these threats. Consequently, universities and other educational institutions should invest in comprehensive cybersecurity education programs, including workshops, seminars, and online training modules. These programs should focus on enhancing students’ ability to recognize phishing emails, suspicious links, and other forms of social engineering, as well as equipping them with practical strategies to avoid becoming targets.
The implications for institutional policies are equally important. The study found that cybersecurity training provided by universities was effective in increasing students’ awareness of phishing attacks, but there is still room for improvement. Some students reported that they did not feel adequately protected by the preventive measures implemented by their institutions. This suggests that universities must continuously evaluate and update their cybersecurity policies and interventions to ensure that they remain relevant and effective in addressing the evolving nature of cyber threats. Institutions should also consider developing tailored resources and support systems to assist students in maintaining secure online practices, such as providing guidelines on password management, the use of public Wi-Fi, and safe browsing habits.
Another important implication of the study is the link between students’ online behaviour and their vulnerability to phishing attacks. The findings revealed that students who engage in risky online behaviours, such as clicking on unknown links or sharing personal information online, are more likely to fall victim to social engineering attacks. This emphasizes the need for educational interventions that not only raise awareness but also promote responsible online behaviour among students. Cybersecurity education should extend beyond technical knowledge and focus on fostering a culture of digital responsibility, where students are encouraged to take personal accountability for their online security. Teaching students about the consequences of their online actions and the potential risks associated with careless behaviour can play a key role in reducing their vulnerability to social engineering attacks.
Moreover, the study’s findings indicate that students’ academic performance is directly impacted by their susceptibility to phishing attacks. Students who fall victim to such attacks may experience disruptions in their academic activities, such as missed deadlines, loss of focus, and even compromised academic records. This suggests that universities should consider integrating cybersecurity awareness into their broader academic support systems. For example, academic advisors and faculty members could be trained to recognize signs that a student may be experiencing difficulties due to cyber threats, enabling them to provide appropriate support and guidance. Additionally, universities could offer counseling services to help students cope with the stress and anxiety that may arise from falling victim to phishing or social engineering attacks.
From a policy perspective, the study’s findings also underscore the need for government agencies and regulatory bodies to implement stronger cybersecurity measures within educational institutions. While some universities have taken steps to protect students, the results indicate that there is a gap between existing measures and the evolving nature of cyber threats. Policymakers should work with educational institutions to develop and enforce guidelines that ensure a consistent and proactive approach to cybersecurity across the sector. This could include mandatory cybersecurity training for all students, regular audits of security practices within universities, and collaboration with cybersecurity experts to stay updated on the latest threats.
Finally, the study’s findings highlight the importance of collaboration between educational institutions, government agencies, and the private sector in tackling the problem of phishing and social engineering attacks. Given the dynamic nature of cyber threats, no single entity can effectively combat these issues alone. By working together, stakeholders can share resources, knowledge, and best practices, ultimately creating a more robust and secure online environment for students.
Recommendations
Based on the findings of this study, the following recommendations are made to help reduce the susceptibility of Nigerian undergraduate students to phishing and social engineering attacks, improve their cybersecurity awareness, and enhance the overall academic environment:
- Implement Comprehensive Cybersecurity Awareness Programs: Educational institutions should prioritize the implementation of structured, ongoing cybersecurity awareness programs tailored to the needs of undergraduate students. These programs should go beyond basic security measures and focus on practical skills for identifying and avoiding phishing and social engineering attacks. Workshops, seminars, and e-learning courses should be introduced at the start of each academic year to refresh students’ knowledge on online safety practices. Topics should include recognizing phishing emails, avoiding suspicious links, and protecting personal data online. Collaboration with cybersecurity experts can further enrich these programs to ensure students are equipped with up-to-date knowledge on emerging threats.
- Promote Responsible Online Behaviour and Digital Literacy: In addition to cybersecurity education, universities should focus on fostering a culture of responsible online behaviour. Students should be educated about the potential risks of careless actions, such as clicking on unknown links or sharing sensitive information online. By promoting digital literacy, students will develop the skills necessary to assess the safety of their online activities critically. Integrating digital citizenship and ethical behaviour into the curriculum can help shape students’ understanding of the long-term consequences of cyber risks on both personal and academic levels.
- Enhance Preventive Security Measures: The findings of this study indicate that while some institutions have implemented preventive measures like security alerts, students still feel vulnerable. Universities should invest in more robust and proactive security solutions such as multi-factor authentication, regular security audits, and real-time threat monitoring systems. Additionally, institutions should establish clear protocols for students to report suspicious activity or potential phishing attempts. Regular security updates and advisories should be communicated through university emails and online platforms to ensure students remain informed about the latest cybersecurity threats.
- Integrate Cybersecurity into Academic Support Systems: Since susceptibility to phishing attacks can negatively impact students’ academic performance, universities should consider integrating cybersecurity support into their broader academic systems. Academic advisors, faculty, and counselors should receive training to recognize signs that students may be experiencing difficulties due to cyber threats. By doing so, faculty can offer timely guidance and interventions, such as redirecting students to appropriate resources or counseling services. Additionally, incorporating cybersecurity topics into existing courses in information technology, business, and other relevant fields could help develop students’ practical skills for managing their digital lives.
- Collaboration with External Cybersecurity Experts and Government Agencies: Educational institutions should collaborate with external cybersecurity experts, government agencies, and the private sector to stay ahead of evolving cyber threats. Partnerships with cybersecurity firms can provide universities with access to cutting-edge tools and training programs. Government agencies should work with universities to establish national guidelines for cybersecurity within higher education, including mandatory student training and the development of standardized security protocols across all institutions. Such collaborations will help create a more secure academic environment for students and ensure that universities are equipped to manage and mitigate cybersecurity risks effectively.
Contribution to Knowledge
This study contributes to the growing body of knowledge in the field of cybersecurity, particularly within the context of Nigerian undergraduate students. While much research has focused on the global trends and the impacts of phishing and social engineering attacks, this study provides valuable insights into the specific experiences of Nigerian students, highlighting the factors that contribute to their susceptibility to these threats. By examining the level of awareness, online behavior, and the effectiveness of preventive measures in Nigerian universities, the study fills a significant gap in the literature on cybersecurity in Nigerian higher education institutions. The results underscore the need for tailored interventions that consider the unique socio-cultural and technological context of Nigeria.
Additionally, the research deepens our understanding of the relationship between cybersecurity knowledge and the vulnerability to phishing attacks. The findings reveal that students’ awareness and understanding of phishing significantly influence their susceptibility to these attacks. This contribution highlights the importance of integrating cybersecurity education into university curricula and ensuring that students not only receive theoretical knowledge but also practical tools to mitigate risks. The study provides empirical evidence supporting the idea that students with higher levels of cybersecurity knowledge are less likely to fall victim to phishing and social engineering schemes, thus contributing to the growing call for proactive cybersecurity education in academic settings.
The study also offers a novel perspective on the impact of social engineering and phishing attacks on academic performance. While the academic literature has largely focused on the direct consequences of these attacks on personal data and financial security, this research emphasizes the academic repercussions, particularly in Nigerian universities. It shows that students’ academic performance can suffer due to time lost in dealing with the consequences of such attacks. This finding suggests that the costs of cybersecurity breaches extend beyond personal security and into the academic success of students, urging academic institutions to rethink their approach to cybersecurity and its direct integration into student support services.
Finally, the research contributes to the development of more effective cybersecurity strategies and preventive measures within universities. The study’s findings suggest that the current preventive efforts, such as security alerts and workshops, are not sufficient to fully protect students from phishing and social engineering attacks. This insight is crucial for policymakers and university administrators, who can use the findings to refine and enhance the security measures in place. It encourages a more comprehensive, institution-wide approach to cybersecurity, integrating both technical and educational solutions to safeguard students and their academic success from the growing threats posed by cybercrime.
Limitations of the Study
This study, while offering valuable insights into the susceptibility of Nigerian undergraduate students to phishing and social engineering attacks, is not without limitations. Firstly, the research was conducted in a specific region, focusing solely on Nigerian universities, which may limit the generalizability of the findings to other countries or regions with different technological or educational contexts. Additionally, the study relied on self-reported data, which could be subject to biases such as social desirability or inaccuracies in students’ recollection of their experiences with phishing attacks. The cross-sectional nature of the study also means that it provides a snapshot of the situation at a particular point in time, rather than tracking changes over a longer period. Lastly, the study’s scope was limited to undergraduate students, meaning that the findings may not be applicable to other demographics such as postgraduate students or faculty members. Despite these limitations, the study provides a strong foundation for further research in the field of cybersecurity awareness in Nigerian higher education institutions.
Suggestions for Further Studies
For further studies, it is suggested that researchers explore the long-term impact of cybersecurity training and awareness programs on students’ susceptibility to phishing and social engineering attacks. A longitudinal approach could provide valuable insights into how awareness and behaviors evolve over time. Additionally, future research could expand the scope to include postgraduate students, faculty members, and staff within universities to assess their cybersecurity awareness and vulnerability, as these groups may have different levels of exposure and risk. It would also be beneficial to conduct comparative studies across multiple regions or countries to examine the effectiveness of different approaches to combating phishing attacks and social engineering techniques. Another area for exploration is the development and testing of more targeted intervention strategies, such as gamified cybersecurity education or more personalized awareness campaigns, to further reduce vulnerability. Finally, research could investigate the role of institutional support, such as improved cybersecurity infrastructure or policies, in mitigating risks related to phishing and social engineering attacks in academic settings.
References
- Yasin, A., & Abuhasan, A. (2022). An intelligent classification model for phishing email detection. arXiv preprint arXiv:1608.02196. https://doi.org/10.48550/arXiv.1608.02196
- Jain, A. K., & Gupta, B. B. (2017). Phishing detection: Analysis of visual similarity-based approaches. Security and Communication Networks, 2017, 5421046. https://doi.org/10.1155/2017/5421046
- Eftimie, S., Moinescu, R., & Răcuciu, C. (2022). Spearphishing susceptibility stems from personality traits. IEEE Access, 10, 73548–73561. https://doi.org/10.1109/ACCESS.2022.3190009.
- Das, S., Nippert-Eng, C., & Camp, L. J. (2022). Evaluating user susceptibility to phishing attacks. Information and Computer Security, 30(1), 1–18. https://doi.org/10.1108/ICS-12-2020-0204
- Jain, A. K., & Gupta, B. B. (2022). A survey of phishing attack techniques, defence mechanisms and open research challenges. Enterprise Information Systems, 16(4), 527–565. https://doi.org/10.1080/17517575.2021.1896786.
- Daengsi, T., Pornpongtechavanich, P., & Wuttidittachotti, P. (2022). Cybersecurity awareness enhancement: A study of the effects of age and gender of Thai employees associated with phishing attacks. Education and Information Technologies, 27(4), 4729–4752. https://doi.org/10.1007/s10639-021-10806-7.
- Wang, S., & Liu, J. (2021). Biometrics on mobile phone. In Recent Application in Biometrics (pp. 3–22).
- Shahbaznezhad, H., Kolini, F., & Rashidirad, M. (2021). Employees’ behaviour in phishing attacks: What individual, organizational, and technological factors matter? Journal of Computer Information Systems, 61(6), 539–550. https://doi.org/10.1080/08874417.2020.1812134.
- Azeez, N. A., Misra, S., Margaret, I. A., & Fernandez-Sanz, L. (2021). Adopting an automated whitelist approach for detecting phishing attacks. Computers & Security, 108, 102328. https://doi.org/10.1016/j.cose.2021.102328.
- Bhardwaj, A., Al-Turjman, F., Sapra, V., Kumar, M., & Stephan, T. (2021). Privacy-aware detection framework to mitigate new-age phishing attacks. Computers & Electrical Engineering, 96, 107546. https://doi.org/10.1016/j.compeleceng.2021.107546.
