{"id":"https://openalex.org/W7204203294","doi":"https://doi.org/10.70112/ajsat-2026.15.1.4350","title":"Measuring the Impact of Embedded Phishing Training on Ransomware-Lure Click Behavior: A Field Study Across Three Organizations","display_name":"Measuring the Impact of Embedded Phishing Training on Ransomware-Lure Click Behavior: A Field Study Across Three Organizations","publication_year":2026,"publication_date":"2026-05-05","ids":{"openalex":"https://openalex.org/W7204203294","doi":"https://doi.org/10.70112/ajsat-2026.15.1.4350"},"language":"en","primary_location":{"id":"doi:10.70112/ajsat-2026.15.1.4350","doi":"https://doi.org/10.70112/ajsat-2026.15.1.4350","is_oa":true,"landing_page_url":"https://doi.org/10.70112/ajsat-2026.15.1.4350","pdf_url":"https://ajsat.org/index.php/ajsat/article/download/4350/7641","source":{"id":"https://openalex.org/S4387279835","display_name":"Asian Journal of Science and Applied Technology","issn_l":"2249-0698","issn":["2249-0698"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Asian Journal of Science and Applied Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://ajsat.org/index.php/ajsat/article/download/4350/7641","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092774257","display_name":"Aminu Muhammad Auwal","orcid":"https://orcid.org/0009-0005-1799-7876","observed_orcids":["https://orcid.org/0009-0005-1799-7876"]},"institutions":[{"id":"https://openalex.org/I161374704","display_name":"University of Jos","ror":"https://ror.org/009kx9832","country_code":"NG","type":"education","lineage":["https://openalex.org/I161374704"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Aminu Muhammad Auwal","raw_affiliation_strings":["Faculty of Natural Sciences, University of Jos, Plateau State, Nigeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Natural Sciences, University of Jos, Plateau State, Nigeria","institution_ids":["https://openalex.org/I161374704"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014184150","display_name":"Sulaiman Shehu","orcid":"https://orcid.org/0009-0009-2259-5280","observed_orcids":["https://orcid.org/0009-0009-2259-5280"]},"institutions":[{"id":"https://openalex.org/I919958821","display_name":"Bayero University Kano","ror":"https://ror.org/049pzty39","country_code":"NG","type":"education","lineage":["https://openalex.org/I919958821"]}],"countries":["NG"],"is_corresponding":false,"raw_author_name":"Sulaiman Shehu","raw_affiliation_strings":["Department of Software Engineering, Bayero University, Kano, Kano State, Nigeria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Software Engineering, Bayero University, Kano, Kano State, Nigeria","institution_ids":["https://openalex.org/I919958821"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.1224,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.95631776,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"15","issue":"1","first_page":"47","last_page":"54"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.0044999998062849045,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/click-through-rate","display_name":"click-through rate","score":0.781000018119812},{"id":"https://openalex.org/keywords/micro-training","display_name":"micro-training","score":0.6570000052452087},{"id":"https://openalex.org/keywords/instructor-led-training","display_name":"instructor-led training","score":0.6850000023841858},{"id":"https://openalex.org/keywords/employee-engagement","display_name":"employee engagement","score":0.7429999709129333},{"id":"https://openalex.org/keywords/randomized-field-experiment","display_name":"randomized field experiment","score":0.4189999997615814}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.734000027179718},{"id":"https://openalex.org/C75630572","wikidata":"https://www.wikidata.org/wiki/Q538904","display_name":"Applied psychology","level":1,"score":0.48840001225471497},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.45669999718666077},{"id":"https://openalex.org/C2779185108","wikidata":"https://www.wikidata.org/wiki/Q7091744","display_name":"Onboarding","level":2,"score":0.45590001344680786},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4318000078201294},{"id":"https://openalex.org/C155108698","wikidata":"https://www.wikidata.org/wiki/Q1231081","display_name":"Randomized experiment","level":2,"score":0.42649999260902405},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40049999952316284},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.3935000002384186},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.3840999901294708},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.37869998812675476},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.37549999356269836},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.36489999294281006},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.36489999294281006},{"id":"https://openalex.org/C143095724","wikidata":"https://www.wikidata.org/wiki/Q515895","display_name":"Odds","level":3,"score":0.3522000014781952},{"id":"https://openalex.org/C168563851","wikidata":"https://www.wikidata.org/wiki/Q1436668","display_name":"Randomized controlled trial","level":2,"score":0.31769999861717224},{"id":"https://openalex.org/C100480397","wikidata":"https://www.wikidata.org/wiki/Q7836899","display_name":"Treatment and control groups","level":2,"score":0.3061000108718872},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28630000352859497},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.2842000126838684},{"id":"https://openalex.org/C60643870","wikidata":"https://www.wikidata.org/wiki/Q1949683","display_name":"Deterrence theory","level":2,"score":0.28299999237060547},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.27889999747276306},{"id":"https://openalex.org/C161615301","wikidata":"https://www.wikidata.org/wiki/Q309396","display_name":"Keystroke logging","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C183469790","wikidata":"https://www.wikidata.org/wiki/Q333501","display_name":"Crash","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.25529998540878296},{"id":"https://openalex.org/C2776378700","wikidata":"https://www.wikidata.org/wiki/Q3030775","display_name":"Distraction","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2531000077724457}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.70112/ajsat-2026.15.1.4350","doi":"https://doi.org/10.70112/ajsat-2026.15.1.4350","is_oa":true,"landing_page_url":"https://doi.org/10.70112/ajsat-2026.15.1.4350","pdf_url":"https://ajsat.org/index.php/ajsat/article/download/4350/7641","source":{"id":"https://openalex.org/S4387279835","display_name":"Asian Journal of Science and Applied Technology","issn_l":"2249-0698","issn":["2249-0698"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Asian Journal of Science and Applied Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.70112/ajsat-2026.15.1.4350","doi":"https://doi.org/10.70112/ajsat-2026.15.1.4350","is_oa":true,"landing_page_url":"https://doi.org/10.70112/ajsat-2026.15.1.4350","pdf_url":"https://ajsat.org/index.php/ajsat/article/download/4350/7641","source":{"id":"https://openalex.org/S4387279835","display_name":"Asian Journal of Science and Applied Technology","issn_l":"2249-0698","issn":["2249-0698"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Asian Journal of Science and Applied Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Randomized Controlled Trial","id":"https://openalex.org/study-designs/randomized-controlled-trial"},{"display_name":"Clinical Trial","id":"https://openalex.org/study-designs/clinical-trial"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204203294.pdf","grobid_xml":"https://content.openalex.org/works/W7204203294.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W3081083428","https://openalex.org/W4309308602","https://openalex.org/W4366447842","https://openalex.org/W4366769277","https://openalex.org/W4386834707","https://openalex.org/W4390457517","https://openalex.org/W4394002372","https://openalex.org/W4404360363","https://openalex.org/W4405005500","https://openalex.org/W4407743961","https://openalex.org/W4411337905","https://openalex.org/W4415457125","https://openalex.org/W6926223057","https://openalex.org/W7092200778"],"related_works":["https://openalex.org/W7223131400","https://openalex.org/W4415811213","https://openalex.org/W4402954709","https://openalex.org/W4411337905","https://openalex.org/W3088348648","https://openalex.org/W2127209084","https://openalex.org/W4414980041","https://openalex.org/W2040174723","https://openalex.org/W4226096212","https://openalex.org/W4416679398"],"abstract_inverted_index":{"Embedded":[0,415],"anti-phishing":[1],"training,":[2],"redirecting":[3],"employees":[4],"who":[5],"fail":[6],"simulated":[7,55,248],"phishing":[8,56,90,138,426,453],"campaigns":[9],"to":[10,222,312,441],"immediate":[11],"instructional":[12],"content,":[13],"is":[14,60,77,470],"among":[15,295,431],"the":[16,51,74,78,101,192,196,296,322,341,354,366,386,432,479],"most":[17,433],"widely":[18],"deployed":[19],"behavioral":[20],"defenses":[21],"against":[22],"ransomware-delivering":[23],"social":[24],"engineering":[25],"attacks.":[26],"Despite":[27],"this":[28,442],"widespread":[29],"adoption,":[30],"recent":[31],"large-scale":[32],"randomized":[33,151,201],"evaluations":[34,86],"have":[35,87],"produced":[36],"evidence":[37],"of":[38,54,66,80,256,459,474],"only":[39,144,231,242,371],"marginal":[40],"absolute":[41],"reductions":[42,395],"in":[43,73,133,149,166,396,424,489],"failure":[44],"rates,":[45],"raising":[46],"fundamental":[47],"questions":[48],"about":[49],"whether":[50,95,124,156,180],"current":[52],"model":[53],"plus":[57],"embedded":[58,125,184,223,297,301],"training":[59,96,143,157,185,230,298,383,460,464,491],"an":[61],"effective":[62],"and":[63,109,145,177,266,281,451],"efficient":[64],"use":[65],"organizational":[67],"security":[68],"resources.":[69],"A":[70,199],"critical":[71],"gap":[72,481],"existing":[75],"literature":[76],"absence":[79],"lure-category-specific":[81],"analyses:":[82],"virtually":[83],"all":[84,270],"prior":[85],"used":[88],"heterogeneous":[89],"campaign":[91,249],"portfolios":[92],"without":[93],"examining":[94],"effectiveness":[97,158],"varies":[98],"systematically":[99],"across":[100,160,206],"specific":[102],"delivery":[103],"techniques\u2014fake":[104],"software":[105,261,343],"updates,":[106],"spoofed":[107,264,355],"invoices,":[108,265],"urgency-framed":[110],"credential":[111],"resets\u2014most":[112],"commonly":[113],"associated":[114],"with":[115,141,183,382,463],"ransomware":[116,435],"campaigns.":[117],"This":[118],"study":[119],"aimed":[120],"to:":[121],"(1)":[122],"determine":[123],"90-second":[126],"micro-training":[127,224,302,416],"produces":[128,417],"a":[129,146,150,236,293,305,347,359,372,418,471],"statistically":[130],"significant":[131,306],"reduction":[132,309,350,362,376,423],"click-through":[134],"rates":[135,273],"for":[136],"ransomware-style":[137],"lures":[139],"compared":[140,275],"instructor-led":[142,228,323],"no-training":[147],"control":[148,237,330],"field":[152,202],"experiment;":[153],"(2)":[154],"examine":[155],"differs":[159],"three":[161,207,257],"ransomware-relevant":[162,258,425],"lure":[163,259],"categories":[164],"differing":[165],"their":[167],"reliance":[168],"on":[169],"visual":[170],"artifact":[171],"inspection":[172],"versus":[173],"urgency-driven":[174],"cognitive":[175],"override;":[176],"(3)":[178],"assess":[179],"employee":[181],"engagement":[182,288,480],"content":[186,384,465,487],"as":[187,292,484,486],"measured":[188],"by":[189],"time-on-module":[190],"moderates":[191],"protective":[193],"effect":[194],"at":[195],"individual":[197],"level.":[198],"six-month":[200],"experiment":[203],"was":[204,290,338],"conducted":[205],"mid-sized":[208],"organizations":[209],"(combined":[210],"n":[211],"=":[212,226,233,244,317,327,334,364,378,401,404,410,413],"1,284":[213],"employees).":[214],"Employees":[215],"were":[216,274],"randomly":[217],"assigned":[218],"within":[219,276],"department":[220],"strata":[221],"(n":[225,232,243],"428),":[227],"annual":[229],"426),":[234],"or":[235,329],"group":[238,303],"receiving":[239],"standard":[240],"onboarding":[241],"430).":[245],"Six":[246],"monthly":[247],"waves":[250],"sent":[251],"one":[252],"email":[253],"from":[254,310],"each":[255],"categories\u2014fake":[260],"update":[262,344],"notifications,":[263],"urgent":[267,367],"credential-reset":[268,368,429],"requests\u2014to":[269],"participants.":[271],"Click-through":[272],"conditions":[277,283],"using":[278,284],"McNemar's":[279],"test":[280],"between":[282],"chi-square":[285],"tests.":[286],"Individual-level":[287],"(time-on-module)":[289],"assessed":[291],"moderator":[294,473],"group.":[299],"The":[300],"showed":[304,346,358,370,391],"overall":[307],"click-rate":[308],"18.4%":[311],"13.1%":[313],"(\u22125.3":[314],"pp,":[315,325,332],"p":[316,326,333,403,412],"0.002),":[318],"significantly":[319,392],"larger":[320,393],"than":[321,406,467],"(\u22121.5":[324],"0.214)":[328],"(\u22121.7":[331],"0.389)":[335],"reductions.":[336],"Effectiveness":[337],"highly":[339],"lure-dependent:":[340],"fake":[342],"category":[345,357,369],"12.4":[348],"pp":[349,361,374],"(p":[351,363,377],"<":[352],"0.001);":[353],"invoice":[356],"4.4":[360],"0.038);":[365],"1.8":[373],"non-significant":[375],"0.412).":[379],"Participants":[380],"engaging":[381],"above":[385],"median":[387],"time":[388],"(>52":[389],"seconds)":[390],"individual-level":[394],"subsequent":[397],"click":[398],"likelihood":[399],"(OR":[400,409],"0.52,":[402],"0.011)":[405],"below-median":[407],"engagers":[408],"0.81,":[411],"0.204).":[414],"measurable":[419],"but":[420],"strongly":[421],"lure-dependent":[422],"susceptibility.":[427],"Urgency-based":[428],"lures,":[430],"common":[434],"initial-access":[436],"vectors,":[437],"are":[438,455],"largely":[439],"resistant":[440],"intervention,":[443],"indicating":[444],"that":[445,477],"technical":[446],"controls":[447],"including":[448],"multi-factor":[449],"authentication":[450],"DNS-level":[452],"filtering":[454],"necessary":[456],"complements":[457],"regardless":[458],"investment.":[461],"Engagement":[462],"rather":[466],"mere":[468],"completion":[469],"key":[472],"effectiveness,":[475],"suggesting":[476],"addressing":[478],"may":[482],"be":[483],"important":[485],"quality":[488],"improving":[490],"outcomes":[492]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-08-26T00:00:00"}