Técnicas de phishing: uma revisão sistemática da literatura

Abstract

With the advent of technology, the population has been increasingly exposed to the internet and to the dangers that reside in cyberspace. Among these threats, those that target the human factor stand out, exploiting this link, which is susceptible to errors regardless of the level of security of the technological infrastructure in which it is embedded. In this context, a type of threat focused on manipulating users through the falsification of official communications in order to collect information emerges prominently: phishing. Thus, the challenge arises of analyzing this cyber threat, as well as its subtypes, their behavior, and the contexts in which they are embedded, in order to develop preventive measures and damage containment policies both in the corporate environment and among uninformed users. However, when conducting an exploratory study on phishing techniques within the context of social engineering, divergences in the nomenclature and definitions of these attacks are observed, making the organization and understanding of these topics more difficult. Given this scenario, the objective of this work is to identify the main concepts related to phishing techniques through a literature review. To this end, the study presents an introduction and the delimitation of the problem, the theoretical framework with essential concepts for understanding the topic, the adopted methodology, the analysis of the obtained results, and the conclusions reached, in addition to proposing directions for future research.