Studies

Going Spear Phishing: Exploring Embedded Training and Awareness

Caputo et al. — IEEE Security & Privacy

Differently framed embedded training messages had no significant effect on whether people clicked later spear-phishing emails, and many people either clicked every link or none regardless of training. Employees largely did not read the training materials.