We recruited 108 senior volunteers through two organizations: a large seniors’ community in southern California and a seniors’ computer club in northern California. Participants agreed to participate in a behavioral study on emails. Each person received between 1–3 emails from different email templates, with content successfully generated through various jailbreaking techniques similar to those tested in the safety guardrail evaluation. Each email contained a unique URL, and our webserver tracked which links were opened. When participants clicked on the phishing links, they were immediately directed to a web page explaining they had participated in a study, where we asked them to answer follow-up questions. Several participants agreed to be interviewed afterward to provide additional insights into why they clicked and their experiences with phishing attempts.
Comments
From the paper:
Experimental Design
We recruited 108 senior volunteers through two organizations: a large seniors’ community in southern California and a seniors’ computer club in northern California. Participants agreed to participate in a behavioral study on emails. Each person received between 1–3 emails from different email templates, with content successfully generated through various jailbreaking techniques similar to those tested in the safety guardrail evaluation. Each email contained a unique URL, and our webserver tracked which links were opened. When participants clicked on the phishing links, they were immediately directed to a web page explaining they had participated in a study, where we asked them to answer follow-up questions. Several participants agreed to be interviewed afterward to provide additional insights into why they clicked and their experiences with phishing attempts.