CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing

Penghui Zhang; Adam Oest; Haehyun Cho; Zhibo Sun; R. C. Johnson; Brad Wardman; Shaown Sarker; Alexandros Kapravelos; Tiffany Bao; Ruoyu Wang; Yan Shoshitaishvili; Adam Doupe; Gail Joon Ahn

doi:10.1109/MSEC.2021.3129992

CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing

Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, R. C. Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupe, Gail Joon Ahn

Research output: Contribution to journal › Article › peer-review

1 Scopus citations

Abstract

Phishing websites with advanced evasion techniques are a critical threat to Internet users because they delay detection by current antiphishing systems. We present CrawlPhish, a framework for automatically detecting and categorizing the client-side (e.g., JavaScript) evasion used by phishing websites.

Original language	English (US)
Pages (from-to)	10-21
Number of pages	12
Journal	IEEE Security and Privacy
Volume	20
Issue number	2
DOIs	https://doi.org/10.1109/MSEC.2021.3129992
State	Published - 2022

ASJC Scopus subject areas

Computer Networks and Communications
Electrical and Electronic Engineering
Law

Access to Document

10.1109/MSEC.2021.3129992

Cite this

@article{db27548b37c141ce94ac8ad92922f278,

title = "CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing",

abstract = "Phishing websites with advanced evasion techniques are a critical threat to Internet users because they delay detection by current antiphishing systems. We present CrawlPhish, a framework for automatically detecting and categorizing the client-side (e.g., JavaScript) evasion used by phishing websites.",

author = "Penghui Zhang and Adam Oest and Haehyun Cho and Zhibo Sun and Johnson, {R. C.} and Brad Wardman and Shaown Sarker and Alexandros Kapravelos and Tiffany Bao and Ruoyu Wang and Yan Shoshitaishvili and Adam Doupe and Ahn, {Gail Joon}",

note = "Publisher Copyright: {\textcopyright} 2003-2012 IEEE.",

year = "2022",

doi = "10.1109/MSEC.2021.3129992",

language = "English (US)",

volume = "20",

pages = "10--21",

journal = "IEEE Security and Privacy",

issn = "1540-7993",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

number = "2",

}

TY - JOUR

T1 - CrawlPhish

T2 - Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing

AU - Zhang, Penghui

AU - Oest, Adam

AU - Cho, Haehyun

AU - Sun, Zhibo

AU - Johnson, R. C.

AU - Wardman, Brad

AU - Sarker, Shaown

AU - Kapravelos, Alexandros

AU - Bao, Tiffany

AU - Wang, Ruoyu

AU - Shoshitaishvili, Yan

AU - Doupe, Adam

AU - Ahn, Gail Joon

PY - 2022

Y1 - 2022

N2 - Phishing websites with advanced evasion techniques are a critical threat to Internet users because they delay detection by current antiphishing systems. We present CrawlPhish, a framework for automatically detecting and categorizing the client-side (e.g., JavaScript) evasion used by phishing websites.

AB - Phishing websites with advanced evasion techniques are a critical threat to Internet users because they delay detection by current antiphishing systems. We present CrawlPhish, a framework for automatically detecting and categorizing the client-side (e.g., JavaScript) evasion used by phishing websites.

UR - http://www.scopus.com/inward/record.url?scp=85127500124&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=85127500124&partnerID=8YFLogxK

U2 - 10.1109/MSEC.2021.3129992

DO - 10.1109/MSEC.2021.3129992

M3 - Article

AN - SCOPUS:85127500124

SN - 1540-7993

VL - 20

SP - 10

EP - 21

JO - IEEE Security and Privacy

JF - IEEE Security and Privacy

IS - 2

ER -

CrawlPhish: Large-Scale Analysis of Client-Side Cloaking Techniques in Phishing

Abstract

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this