Compreendendo a psicologia do phishing: uma abordagem prática centrada no usuário

Abstract

Information security has become more relevant with the growth of cyber attacks, such as social engineering. Phishing is a psychological manipulation technique used to deceive and convince other people to reveal relevant data. This work seeks to analyze the psychological aspects involved in phishing attacks in order to understand user behavior. The research included a literature review and a questionnaire applied to students of Systems Analysis and Development, Data Science and Information Security at UFC’s Jardins de Anita Campus, addressing their knowledge, experiences and preventive measures in relation to phishing. The results show that although 94% identify signs of phishing, 84% have never received specific training, demonstrating vulnerabilities. Attacks have grown globally in times of technological advances, and the choice of this topic is relevant for developing protection strategies and improving cyber security. Simulations and ongoing education programs are suggested to improve users’ awareness and digital security.