Social distance, trust and getting “hooked”: A phishing expedition

Sean R. Martin, Julia J. Lee and Bidhan Lalit Parmar

Organizational Behavior and Human Decision Processes, 2021, vol. 166, issue C, 39-48

Abstract: Phishing is a message-based computer attack sent to deceive and exploit recipients via email. Phishing is a problem for organizations because getting “hooked,” or tricked into acting on behalf of the sender, can put sensitive personal and organizational data at risk. In this research, we draw from several theoretical perspectives concerning social distance and trust as an exploitable resource to provide evidence that, even in contexts where actual social distance and intentions are nearly impossible to determine, people look to category-based signals of social distance to establish trust, which increases the likelihood of deception. We present the results of a validation study and a randomized field experiment in which we sent phishing emails to all employees of an insurance company.

Keywords: Social distance; Social identity; Trust; Deception; Data security; Email; Ethics; Field experiment (search for similar items in EconPapers)
Date: 2021
References: View references in EconPapers View complete reference list from CitEc
Citations:

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S0749597818304540
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:jobhdp:v:166:y:2021:i:c:p:39-48

DOI: 10.1016/j.obhdp.2019.08.001

Access Statistics for this article

Organizational Behavior and Human Decision Processes is currently edited by John M. Schaubroeck

More articles in Organizational Behavior and Human Decision Processes from Elsevier
Bibliographic data for series maintained by Catherine Liu ().