Training and competence
Stress
Attackers use social engineering to exploit emotions.
Human error contributes to the success of phishing
Fatigue
Lack of awareness
Trust and Overconfidence
Here at FishOutPhish we found that social engineering was a significant factor in cyber attacks, with phishing emails making up most attacks. From identity theft to corporate sabotage, phishing is the biggest threat to everyone. We are surrounded by technology, from the computers we use for work and school to the phones we use for social media and games. There is so much content out there it is highly probable that you will click on a link you shouldn't have. This global issue affects everyone at different levels, and there is a worldwide market for better personal training.
We built empathy by going out into the field and conducting in-person interviews as well as sending out a cyber hygiene phishing survey to ODU faculty and students. By gathering data from people with different educational backgrounds, ages, and disciplines, we came to the conclusion that the biggest issue with cyber hygiene was phishing.
When designing FishOutPhish, developing a working prototype was high on our list to prove that there is a need for our solution. Showing how easy it is to grab your complex password despite having 2-factor authentication was critical l to the overall process.