PiMRef: Deducing Ever-evolving Spear-phishing Emails with Knowledge Base Invariants
· 0 citations
· 97 references
Similar papers
PiMRef: Deducing Ever-evolving Spear-phishing Emails with Knowledge Base Invariants
PiMRef is proposed, the first reference-based solution to detect ever-evolving phishing emails using knowledge-based invariants, targeting the identity-impersonation attacks that characterize spear-phishing.
Ruo-Fan Liu, Yun Lin, Yu-Xin Wang et al.
· 4 citations
Open access
Aug 2026
Implementation of Deterministic Finite Automata for Phishing URL Detection
DFA can provide a transparent and educational approach for illustrating phishing detection mechanisms and improving user understanding of suspicious URL characteristics, and the findings suggest that DFA can provide a transparent and educational approach for illustrating phishing detection mechanisms and improving user...
M. Pakpahan, Zulfahmi Indra, Sirlia Sahid et al.
· bit-Tech · 0 citations
Aug 2026
No-answer puzzle: a curiosity-driven attacker model and motivation inference for APT in cybersecurity of major events
A no-answer puzzle scheme, a lightweight and non-loginable password-interaction system tailored for major-event scenarios to capture pre-attack preparations from attackers, and a fuzzy-logic-based model for inferring attacker motivation are proposed.
Chenlu Zhuansun, Yiji Lin, Yuan Liu et al.
· Scientia Sinica Informationi... · 0 citations
Preprint
Sep 2026
Nebulon Enterprise Simulated Threats for Phishing Research (NEST-Phish): A Synthetic Enterprise Phishing Email Dataset for Behavioral and Machine-Learning Research
A synthetic enterprise phishing email dataset built around a fictitious organization, Nebulon, is introduced to support future work on phishing detection, human susceptibility, explainability, and benchmark development in enterprise-like contexts.
Emily Winokur, Lauren S. Treiman, Allen G. Moore et al.
· 0 citations
Preprint
Aug 2026
An Analysis of Architectural and Operational Dynamics of Phishkits in the Wild
The level of code reuse and heavy reliance on known tricks to build pre-packaged phishing pages make a large number of cases predictable, which can potentially make the detection of these adversarial operations even easier at scale.
Behzad Ousat, M. Tofighi, E. Schafir et al.
· 0 citations
Preprint
Aug 2026
LoginTrap: Uncovering Task-Agnostic Phishing-Style Indirect Prompt Injection Attacks against LLM-based Web Agents
LLM-based web agents automate user tasks by observing webpages and executing browser actions on behalf of users. As these agents operate on real web services, login becomes a sensitive authentication boundary because it involves credentials and sensitive information. Existing work shows that malicious webpage content c...
Longtao Guo, Zelin Zhang, Kaifeng Huang et al.
· 0 citations