How Phishers Exploit the Coronavirus Pandemic: A Content Analysis of COVID-19 Themed Phishing Emails

Abstract

This empirical study is an exploration of the influence methods, fear appeals, and urgency cues applied by phishers to trick or coerce users to follow instructions presented in coronavirus-themed phishing emails. To that end, a content analysis of 208 coronavirus-themed phishing emails has been conducted. We identified nine types of phishing messages crafted by phishers. Phishing emails purporting to provide information about the spread of the disease were the most common type of unsolicited emails. Authority, liking and commitment emerged as the most common influence methods. Fear appeals and urgency cues were present in almost all of the sampled phishing messages. Finally, the analysis of coronavirus-themed phishing emails revealed a shift in the modus operandi of phishers. The implications of these results are discussed in this paper.

Identifying Factors that Support the Delivery of Exceptional Care in General Practice and Development of the IDEAL Framework: A Qualitative Study

“…An example of this process is presented in Figure 1 . While typically calculated within summative content analyses ( Hsieh & Shannon, 2005 ), frequency analyses have also been used within a DCA ( Akdemir & Yenal., 2021 ; Brown et al, 2021 ). Frequencies were collated here to address the study’s second research aim and compare salient factors between groups ( Schilling, 2006 ).…”

The development of phishing during the COVID-19 pandemic: An analysis of over 1100 targeted domains

“…As indicated in the Microsoft Digital Defense Report, phishing attacks consist of almost 70% of all cyber attacks ( Kaliňák, 2021 ). The work of Akdemir and Yenal (2021) analysed 208 Covid-19 phishing emails in April 2020 and identified 9 subjects that were used to target organizations and individual users, being fear appeals, urgency cues, source credibility, authority, liking, social proof, consistency commitment, scarcity, reciprocity (many of Cialdini’s principles ( Cialdini and Sagarin, 2005 )). The study by ( Sharevski et al., 2022 ) explored, in a laboratory setting, the susceptibility of people to phishing via QR codes, a technology often used during the COVID-19 pandemic.…”

The COVID‐19 scamdemic: A survey of phishing attacks and their countermeasures during COVID‐19

“…The analysis revealed interesting patterns about the sheer breadth and diversity of COVID‐19 related cyber‐crime incidents and how these crimes were continually evolving in response to changing situational factors related to the pandemic. Similarly, the aim of [ 69 ] was that of contributing to users' protection by exploring online perpetrators' modus operandi applied to exploit Internet users' coronavirus fears through phishing emails. To that end, the content of 208 coronavirus‐themed phishing emails was examined.…”