Why phishing still works: User strategies for combating phishing attacks

This study evaluates the effectiveness of recent changes that have been made in web browser designs to help users identify fraudulent websites and assesses whether users have developed improved detection strategies and mental models of phishing nearly a decade after Dhamija et al. (2006)'s initial phishing study.