Abstract:Machine learning (ML) based approaches have been the mainstream solution for anti-phishing detection. When they are deployed on the client-side, ML-based classifiers are vulnerable to evasion attacks. However, such potential threats have received relatively little attention because existing attacks destruct the functionalities or appearance of webpages and are conducted in the white-box scenario, making it less practical. Consequently, it becomes imperative to understand whether it is possible to launch evasion attacks with limited knowledge of the classifier, while preserving the functionalities and appearance. In this work, we show that even in the grey-, and black-box scenarios, evasion attacks are not only effective on practical ML-based classifiers, but can also be efficiently launched without destructing the functionalities and appearance. For this purpose, we propose three mutation-based attacks, differing in the knowledge of the target classifier, addressing a key technical challenge: automatically crafting an adversarial sample from a known phishing website in a way that can mislead classifiers. To launch attacks in the white- and grey-box scenarios, we also propose a sample-based collision attack to gain the knowledge of the target classifier. We demonstrate the effectiveness and efficiency of our evasion attacks on the state-of-the-art, Google's phishing page filter, achieved 100% attack success rate in less than one second per website. Moreover, the transferability attack on BitDefender's industrial phishing page classifier, TrafficLight, achieved up to 81.25% attack success rate. We further propose a similarity-based method to mitigate such evasion attacks, Pelican. We demonstrate that Pelican can effectively detect evasion attacks. Our findings contribute to design more robust phishing website classifiers in practice.

Analysis of malicious code for phishing

Analysis of Phishing Attacks and Countermeasures

Analyzing the risk and financial impact of phishing attacks using a knowledge based approach

Multilayer Approach to Defend Phishing Attacks

Phishing - A Growing Threat to E-Commerce

Phishing Codebook: A Structured Framework for the Characterization of Phishing Emails

Next-Generation Phishing: How LLM Agents Empower Cyber Attackers

Protect sensitive sites from phishing attacks using features extractable from inaccessible phishing URLs

Analysis and prevention of AI-based phishing email attacks

How Good Are We at Detecting a Phishing Attack? Investigating the Evolving Phishing Attack Email and Why It Continues to Successfully Deceive Society

Walkthrough phishing detection techniques

Advanced Evasion Attacks and Mitigations on Practical ML-Based Phishing Website Classifiers

A comprehensive survey of AI-enabled phishing attacks detection techniques

Enterprise Credential Spear-phishing attack detection

A Malicious URL Detection Method Based on CNN

Mechanism and Defense on Malicious Code

A Survey of Intelligent Detection Designs of HTML URL Phishing Attacks

Scamming Higher Ed: An Analysis of Phishing Content and Trends

Detecting and Characterizing Lateral Phishing at Scale

Survey on Malicious Code Intelligent Detection Techniques

Canary in Twitter Mine: Collecting Phishing Reports from Experts and Non-experts