Training on Social Media Cybersecurity Skills in the Healthcare Context

In the last decades, social media has experienced exponential growth due to its popularity and advantages in communication, connection, and broadcasting, etc. Nevertheless, social media also presents disadvantages and threats that can be exploited for evil ends. Indeed, it has become a vector of attack for cybercriminals and scammers. Broadcasting and public access have allowed the public to post fake news and disinformation. The wrong use of social media by users due to negligence or unawareness allows these threats to succeed. In this scenario, the healthcare sector is also affected by social media threats, as can be seen over the years in the frequent daily phishing attacks, vulnerable devices, data leaks of personal information, etc. This article proposes an automated tool for training social media cybersecurity competencies in the social and professional sectors of the healthcare environment, built on the Cyber Range context. It allows automating the generation and configuration of simulated social media exercises with several levels of content, difficulty, and realism, creating multiple hyperrealistic situations across a wide range of possibilities. Training phishing attacks, crisis management, social media attacks, and pandemic or disease crisis disinformation are some of the possibilities, both theoretical and practical.