Mitigation strategies against the phishing attacks: A systematic literature review
A survey of what has actually been tried against phishing and how well each approach held up. Useful mostly as a map of what does not work on its own.
The research we read
A shelf, not a publication list. These are the papers we go back to on how phishing works, why it keeps working, and what has been tried against it. Each entry says why it is here, and the year is on every one so you can see how current the shelf is.
How Good Are We at Detecting a Phishing Attack? Investigating the Evolving Phishing Attack Email and Why It Continues to Successfully Deceive Society
Measures how badly people do at spotting phishing email, which is the gap Vigil exists to close. The failure is not inattention; it is that the signals people were taught to look for stopped being present.
Phishing Attacks: A Recent Comprehensive Study and a New Anatomy
The taxonomy paper the rest of the literature cites, and the closest thing the field has to a shared vocabulary for attack stages.
The Scams Among Us: Who Falls Prey and Why
The psychology rather than the technology. Susceptibility is situational, not a fixed trait, which is the argument for asking the reader a question at the moment of decision.