Distler, Verena and Abdrabou, Yasmeen and Dietz, Felix and Alt, Florian (2023) Triggering Empathy out of Malicious Intent: The Role of Empathy in Social Engineering Attacks. In: Proceedings of the 2nd Empathy-Centric Design Workshop, EmpathiCH 2023 - Collocated with ACM CHI Conference on Human Factors in Computing Systems :. ACM International Conference Proceeding Series . Association for Computing Machinery (ACM), DEU, pp. 1-6. ISBN 9798400707490
Full text not available from this repository.Abstract
Social engineering is a popular attack vector among cyber criminals. During such attacks, impostors often attempt to trigger empathy to manipulate victims into taking dangerous actions, for example, sharing their credentials or clicking on malicious email attachments. The objective of this position paper is to initiate a conversation on the tension between positive and negative aspects of empathy in HCI as it pertains to security-relevant behaviors. To this end, we focus on the malicious ways in which empathy can be instrumentalized in social engineering. We describe examples of such empathy-related social engineering attacks, explore potential solutions (including the automated detection of empathy-triggering communication, or of empathetic communication on the part of a potential victim), and discuss technical, social as well as organizational interventions. We highlight research challenges and directions for future work.