Breaking Bad Email Habits: Bounding the Impact of Simulated Phishing Campaigns

Simulated phishing campaigns are widely deployed, yet the behavioral data they produce is endogenous: because training is triggered by clicking, the employees receiving intervention have already demonstrated susceptibility. This endogeneity, combined with the difficulty of separating genuine habi...

Compromised Sites Redirect to Anti-Phishing Info

For the past 20 months, Carnegie Mellon University’s Human Computer Interaction Institute has been measuring referrals from phishing sites to an education page set up by the Anti-Phishing Working Group APWG. Hong said the site now receives close to 25,000 referrals per month from phishing sites...