Cognitive Model of Spear Phishing Cyberattacks

Abstract

This research proposes a systemic theoretical model to understand the effectiveness of spear phishing in the context of fake banking advisor fraud, which affects 20% of the French population. Based on in-depth cognitive interviews, the study reveals how attackers orchestrate a cascade of psychological manipulations in four interdependent phases, systematically exploiting universal cognitive biases and emotional responses to bypass victims' analytical reasoning. The results demonstrate that vulnerability to spear phishing is not simply due to individual negligence but results from sophisticated exploitation of fundamental cognitive mechanisms, leading to a gradual deterioration of judgment and decision-making abilities. This detailed understanding of the underlying processes suggests a paradigm shift towards preventive strategies that emphasize the development of "situational intelligence" and protective metacognition, repositioning humans not as the "weak link" but as aware actors capable of recognizing their own cognitive vulnerabilities and activating appropriate protective strategies against digital manipulations.

Keywords: Spear Phishing, Social Engineering, Banking Fraud, Cognitive Biases, Cognitive Cybersecurity, Human Factors, Systemic Model

DOI: 10.54941/ahfe1008209