Objective

To understand how aspects of vishing calls (phishing phone calls) influence perceived visher honesty.

Background

Little is understood about how targeted individuals behave during vishing attacks. According to truth-default theory, people assume others are being honest until something triggers their suspicion. We investigated whether that was true during vishing attacks.

Methods

Twenty-four participants read written descriptions of eight real-world vishing calls. Half included highly sensitive requests; the remainder included seemingly innocuous requests. Participants rated visher honesty at multiple points during conversations.

Results

Participants initially perceived vishers to be honest. Honesty ratings decreased before requests occurred. Honesty ratings decreased further in response to highly sensitive requests, but not seemingly innocuous requests. Honesty ratings recovered somewhat, but only after highly sensitive requests.

Conclusions

The present results revealed five important insights: (1) people begin vishing conversations in the truth-default state, (2) certain aspects of vishing conversations serve as triggers, (3) other aspects of vishing conversations do not serve as triggers, (4) in certain situations, people’s perceptions of visher honesty improve, and, more generally, (5) truth-default theory may be a useful tool for understanding how targeted individuals behave during vishing attacks.

Application

Those developing systems that help users deal with suspected vishing attacks or penetration testing plans should consider (1) targeted individuals’ truth-bias, (2) the influence of visher demeanor on the likelihood of deception detection, (3) the influence of fabricated situations surrounding vishing requests on the likelihood of deception detection, and (4) targeted individuals’ lack of concern about seemingly innocuous requests.

中文翻译：

---

在包含高度敏感或看似无害的请求的语音钓鱼攻击期间，对呼叫者诚实度的看法有何不同

 客观的

了解网络钓鱼电话（网络钓鱼电话）的各个方面如何影响感知的 Visher 诚实度。

 背景

人们对目标个人在网络钓鱼攻击期间的行为知之甚少。根据真相默认理论，人们认为其他人是诚实的，直到某些事情引发了他们的怀疑。我们调查了网络钓鱼攻击期间是否属实。

 方法

二十四名参与者阅读了八个真实世界钓鱼电话的书面描述。一半包含高度敏感的请求；其余的包括看似无害的请求。参与者在对话中多次评价维舍尔的诚实度。

 结果

参与者最初认为维舍尔是诚实的。在提出请求之前，诚实评级会下降。对于高度敏感的请求，诚实评级进一步下降，但对于看似无害的请求则不然。诚实评级有所回升，但只是在高度敏感的请求之后。

 结论

目前的结果揭示了五个重要的见解：(1) 人们在默认真相状态下开始进行语音钓鱼对话，(2) 语音钓鱼对话的某些方面可充当触发器，(3) 语音钓鱼对话的其他方面不会充当触发器，(4 ）在某些情况下，人们对 Visher 诚实的看法会改善，并且更一般地说，（5）真相默认理论可能是了解目标个人在 Visher 攻击期间如何行为的有用工具。

 应用

那些帮助用户处理可疑的网络钓鱼攻击或渗透测试计划的开发系统应考虑 (1) 目标个人的真实偏见，(2) 网络钓鱼行为对欺骗检测可能性的影响，(3) 捏造情况的影响围绕欺骗检测可能性的语音钓鱼请求，以及 (4) 目标个人对看似无害的请求缺乏关注。