Phishing no instagram,vulnerabilidades e práticas de segurança dos usuários: um estudo de caso

Abstract

The increasing use of social networks, such as Instagram, has introduced new vulnerabilities, making users frequent targets of social engineering and phishing attacks. These techniques exploit human flaws and a lack of digital security awareness, leading to information theft and account breaches. One of the most common phishing attacks on the platform is impersonation, where cybercriminals create fake profiles and messages to collect confidential data. Based on the theoretical framework studied and data collected from 108 participants through a structured questionnaire, this study analyzed users’ knowledge of phishing and their digital security practices, as well as the influence of Information Technology education on the adoption of preventive measures. The results indicate that while most respondents are familiar with the term phishing, few have an intermediate or advanced understanding of the topic, revealing a gap in the comprehension of this type of attack. The study also demonstrated that, although users with IT education have knowledge of basic digital security measures, this protection is not absolute, as risky behaviors persist, such as low adherence to two-factor authentication and the lack of regular URL verification. This research contributes to studies on digital security on Instagram by identifying user vulnerabilities and suggesting basic protection measures that are often overlooked, such as enabling two-factor authentication and verifying URLs. Furthermore, it emphasizes the importance of educational campaigns to mitigate risks.