Sirawongphatsara, Patsita
Unknown Affiliation

Published : 2 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 2 Documents
Search

Exploring bank account information of nominees and scammers in Thailand Sirawongphatsara, Patsita; Pornpongtechavanich, Phisit; Sriamorntrakul, Pakkasit; Daengsi, Therdpong
Bulletin of Electrical Engineering and Informatics Vol 13, No 6: December 2024
Publisher : Institute of Advanced Engineering and Science

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.11591/eei.v13i6.8042

Abstract

In today's digital era, people heavily depend on the internet for various tasks, such as online banking and e-commerce. While online transactions offer convenience, they also expose vulnerable individuals to potential exploitation by online scammers. The analysis and inquiry presented herein rely on data sourced from ChaladOhn, a system developed by academics and law enforcement, covering the period from February 2022 to January 2023. The comprehensive investigation reveals that each case resulted in losses under 10 million Thai Baht, accumulating to a staggering 3,100 million in damages. Notably, the fraudulent activities were traced back to the top two banks in the Thai market, referred to as the first and second bank. These banks were found responsible for; i) 28.2% and 16.0% of all scam accounts, ii) 25.6% and 20.5% of all transactions, and iii) 35.7% and 14.9% of all victim losses, respectively. The results of the inquiry must be shared with appropriate organizations and regulators due to the predicted worsening of this situation. This proactive approach aims to facilitate the development, recommendation, and implementation of effective strategies to address the escalating threat of online scams.
Comparative simulation of phishing attacks on a critical information infrastructure organization: an empirical study Sirawongphatsara, Patsita; Pornpongtechavanich, Phisit; Phanthuna, Nattapong; Daengsi, Therdpong
Bulletin of Electrical Engineering and Informatics Vol 14, No 2: April 2025
Publisher : Institute of Advanced Engineering and Science

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.11591/eei.v14i2.8020

Abstract

Nowadays, cybersecurity is crucial. Therefore, cybersecurity awareness should be a concern for businesses, particularly critical infrastructure organizations. The results of this study, using simulated phishing attacks, indicate that in the first attempt, workers of a Thai railway firm received a phony email purporting to inform recipients of a special deal from a reputable retailer of information technology (IT) equipment. The findings showed that 10.9% of the 735 workers fell for the scam. This demonstrates a good level of awareness regarding cyber dangers. The workers who were duped by the initial attack received awareness training. Next, a second attempt was carried out. This time, the strategy was for the workers to change their passwords through an email notification from the fake IT staff. According to the findings, 1.4% of the workers fell victim to both attacks (different email content), and a further 8.0% of the workers who did not fall victim to the first attack were deceived. Furthermore, after the statistical analysis, it was confirmed that there is a difference in the relationship between the workers and the two phishing attack simulations using different content. As a result, this study has demonstrated that different types of content can affect levels of awareness.