Matthew RosenquistFounder & CISO Advisor, Cybersecurity Insights · CISO, Cybersecurity Strategist, & Industry Advisor

The Psychology of Phishing: Why Smart People Fall for Dumb Tricks with Sumona Banerji #podcast

5 Jan 2025 · 1 min

Watch on YouTube

0:49

In this segment of the podcast, the speaker argues that technical knowledge alone does not make people resilient to social engineering attacks. Attackers deliberately bypass logical, analytical thinking by provoking strong emotional reactions. The key to effective manipulation is triggering fear, urgency, and anxiety, which drive rapid behavior change. Consequently, building resistance requires focusing on emotional regulation and strengthening cognitive controls such as attention, focus, situational awareness, and threat perception, rather than merely imparting factual information.

Chapters

The technical knowledge about something does not build the resilience because the whole point of social engineering is the fact that you override logical analytical thinking and you move into emotional reactivity. No matter how much logical analytical information I have, the whole point is to override that and, and harness my emotional reactivity. So we have to target emotional reactivity. So attention and focus, situational awareness, threat perception levels. We also have something that's very fundamental, which is emotional regulation, because fear, urgency, anxiety— these are the three things that are the emotions that drive max, most effective behavior change, especially from a manipulation standpoint and social engineering standpoint.