PhishReplicant: A Language Model-based Approach to Detect Generated Squatting Domain Names

T Koide, N Fukushi, H Nakano, D Chiba - Proceedings of the 39th …, 2023 - dl.acm.org
Domain squatting is a technique used by attackers to create domain names for phishing
sites. In recent phishing attempts, we have observed many domain names that use multiple …

Content-agnostic detection of phishing domains using certificate transparency and passive dns

M AlSabah, M Nabeel, Y Boshmaf, E Choo - Proceedings of the 25th …, 2022 - dl.acm.org
Existing phishing detection techniques mainly rely on blacklists or content-based analysis,
which are not only evadable, but also exhibit considerable detection delays as they are …

Blocklist-Forecast: Proactive Domain Blocklisting by Identifying Malicious Hosting Infrastructure

U Kumarasinghe, M Nabeel, C Elvitigala - Proceedings of the 27th …, 2024 - dl.acm.org
Domain blocklists play an important role in blocking malicious domains reaching users.
However, existing blocklists are reactive in nature and slow to react to attacks, by which time …

Dealing with Bad Apples: Organizational Awareness and Protection for Bit-flip and Typo-Squatting Attacks

H Hu, A Zivi, C Doerr - Proceedings of the 19th International Conference …, 2024 - dl.acm.org
The domain name system (DNS) maps human-readable service names to IP addresses
used by the network. As it exerts control over where users are directed to, domain names …