PhishEye: Live Monitoring of Sandboxed Phishing Kits
By Xiao Han, Nizar Kheir, Davide Balzarotti. 2016
121 citations recorded by the source corpus.
Phishing is a form of online identity theft that deceives unaware users into disclosing their confidential information. While significant effort has been devoted to the mitigation of phishing attacks, much less is known about the entire life-cycle of these attacks in the wild, which constitutes, however, a main step toward devising comprehensive anti-phishing techniques. In this paper, we present a novel approach to sandbox live phishing kits that completely protects the privacy of victims. By using this technique, we perform a comprehensive real-world assessment of phishing attacks, their mechanisms, and the behavior of the criminals, their victims, and the security community involved in the process -- based on data collected over a period of five months. Our infrastructure allowed us to draw the first comprehensive picture of a phishing attack, from the time in which the attacker installs and tests the phishing pages on a compromised host, until the last interaction with real victims and with security researchers. Our study presents accurate measurements of the duration and effectiveness of this popular threat, and discusses many new and interesting aspects we observed by monitoring hundreds of phishing campaigns.
Subfields: Information Systems, Privacy & Security, Signal Processing
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Information Systems
- Battista Biggio
- Fabio Roli
- Igino Corona
- Giorgio Fumera
- Davide Ariu
- Giorgio Giacinto
- Davide Maiorca
- Joseph Gardiner
In Privacy & Security
- Battista Biggio
- Fabio Roli
- Igino Corona
- Davide Ariu
- Giorgio Fumera
- Davide Maiorca
- Giorgio Giacinto
- Joseph Gardiner
In Signal Processing
- Battista Biggio
- Fabio Roli
- Igino Corona
- Giorgio Fumera
- Giorgio Giacinto
- Davide Ariu
- Davide Maiorca
- Nicholas Carlini
Citations in the corpus
- Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning (2017, background): “A very clear example of this is provided by phishing kits , which automatically compromise legitimate (vulnerable) websites in the wild, and hide phishing webpages within them [52, 53].”
- DeltaPhish: Detecting Phishing Webpages in Compromised Websites (2017, methodology): “To maximize profit, as most of the current cyber-crime activities, modern phishing attacks are automatically deployed on a large scale, exploiting vulnerabilities in publicly-available websites through the so-called phishing kits [4, 5, 6, 7, 8].”