{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,31]],"date-time":"2026-10-31T16:25:08Z","timestamp":1793463908396,"version":"4.5.0"},"reference-count":40,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,5]]},"DOI":"10.1109\/ecrime.2018.8376206","type":"proceedings-article","created":{"date-parts":[[2018,6,11]],"date-time":"2018-06-11T23:19:16Z","timestamp":1528759156000},"page":"1-12","source":"Crossref","is-referenced-by-count":82,"title":["Inside a phisher's mind: Understanding the anti-phishing ecosystem through phishing kit analysis"],"prefix":"10.1109","author":[{"given":"Adam","family":"Oest","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yeganeh","family":"Safei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adam","family":"Doupe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gail-Joon","family":"Ahn","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Brad","family":"Wardman","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gary","family":"Warner","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1866423.1866434"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2019599.2019606"},{"key":"ref33","year":"0","journal-title":"NetCraft August 2017 Web Server Survey"},{"key":"ref32","first-page":"40","article-title":"Enhancing phishing e-mail classifiers: A lexical url analysis approach","volume":"2","author":"khonji","year":"2012","journal-title":"International Journal for Information Security Research (IJISR)"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/2030376.2030387"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2016.7745439"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/1179542.1179544"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSACW.2013.79"},{"key":"ref35","year":"2017","journal-title":"Statcounter Desktop browser market share worldwide"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2616"},{"key":"ref10","article-title":"ITTC report on online identity theft technology and countermeasures 1: Phishing technology, chokepoints and countermeasures","author":"emigh","year":"2005","journal-title":"Radix Labs"},{"key":"ref40","article-title":"Large-scale automatic classification of phishing pages","author":"whittaker","year":"2010","journal-title":"NDSS ‘14"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3055305.3055310"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2016.105"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2851613.2851801"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"78","DOI":"10.1007\/978-3-319-20550-2_5","article-title":"That aint you: Blocking spearphishing through behavioral modelling","author":"stringhini","year":"2015","journal-title":"Detection of Intrusions and Malware and Vulnerability Assessment"},{"key":"ref15","article-title":"An evaluation of extended validation and picture-in-picture phishing attacks","author":"jackson","year":"2007","journal-title":"Microsoft Research"},{"key":"ref16","article-title":"Let's Automate Let's Encrypt","volume":"2016","author":"lukovenko","year":"2016","journal-title":"Linux J"},{"key":"ref17","author":"sheng","year":"2009","journal-title":"An Empirical Analysis of Phishing Blacklists"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2015.7364026"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242659"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime.2011.6151979"},{"key":"ref4","author":"thomas","year":"2017","journal-title":"Data breaches phishing or malware? Understanding the risks of stolen credentials"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2063176.2063197"},{"key":"ref3","year":"0","journal-title":"Anti-Phishing Work Group APWG Trends Report Q4 2016"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2584680"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2504730.2504753"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2872427.2883060"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1314389.1314391"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.50"},{"key":"ref2","first-page":"1","article-title":"Learning more about the underground economy: A case-study of keyloggers and dropzones","author":"holz","year":"2009","journal-title":"Computer Security-ESORICS 2009"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1124772.1124861"},{"key":"ref1","first-page":"195","article-title":"Trafficking fraudulent accounts: The role of the underground market in Twitter spam and abuse","author":"thomas","year":"2013","journal-title":"USENIX Security Symposium"},{"key":"ref20","first-page":"155","article-title":"Analysis of back-doored phishing kits","volume":"361","author":"mccalley","year":"2011","journal-title":"IFIP Int Conf Digital Forensics"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ICIMP.2007.33"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(13)70053-8"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978330"},{"key":"ref23","first-page":"4:1","article-title":"There is no free phish: An analysis of “free” and live phishing kits","author":"cova","year":"2008","journal-title":"Proceedings of the 2Nd Conference on USENIX Workshop on Offensive Technologies ser WOOT'08"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2488388.2488405"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1299015.1299016"}],"event":{"name":"2018 APWG Symposium on Electronic Crime Research (eCrime)","location":"San Diego, CA","start":{"date-parts":[[2018,5,15]]},"end":{"date-parts":[[2018,5,17]]}},"container-title":["2018 APWG Symposium on Electronic Crime Research (eCrime)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8372143\/8376205\/08376206.pdf?arnumber=8376206","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,26]],"date-time":"2022-01-26T05:03:18Z","timestamp":1643173398000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8376206\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,5]]},"references-count":40,"URL":"https:\/\/doi.org\/10.1109\/ecrime.2018.8376206","relation":{},"subject":[],"published":{"date-parts":[[2018,5]]}}}