Investigating Phishing Awareness Using Virtual Agents and Eye Movements

Phishing emails typically attempt to persuade recipients to reveal private or confidential information (e.g., passwords or bank details). Interaction with such emails places individuals at risk of financial loss and identity theft. We present an ongoing study using eye tracking metrics and varying interface components to assess users’ ability to spot simulated phishing attempts. Findings seek to establish how users interact with email inbox interfaces and will inform future design of usable security tools.