{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,8]],"date-time":"2025-11-08T13:43:11Z","timestamp":1762609391499},"reference-count":50,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,11,30]],"date-time":"2022-11-30T00:00:00Z","timestamp":1669766400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,11,30]],"date-time":"2022-11-30T00:00:00Z","timestamp":1669766400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,11,30]]},"DOI":"10.1109\/ecrime57793.2022.10142092","type":"proceedings-article","created":{"date-parts":[[2023,6,7]],"date-time":"2023-06-07T02:33:43Z","timestamp":1686105223000},"source":"Crossref","is-referenced-by-count":8,"title":["Leaky Kits: The Increased Risk of Data Exposure from Phishing Kits"],"prefix":"10.1109","author":[{"given":"Bhaskar","family":"Tejaswi","sequence":"first","affiliation":[{"name":"Concordia University,Montreal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nayanamana","family":"Samarasinghe","sequence":"additional","affiliation":[{"name":"Concordia University,Montreal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sajjad","family":"Pourali","sequence":"additional","affiliation":[{"name":"Concordia University,Montreal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammad","family":"Mannan","sequence":"additional","affiliation":[{"name":"Concordia University,Montreal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amr","family":"Youssef","sequence":"additional","affiliation":[{"name":"Concordia University,Montreal,Canada"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","year":"2021","journal-title":"phishunt io"},{"key":"ref12","author":"pavlovic","year":"2020","journal-title":"Introducing phishing kit tracker"},{"key":"ref15","article-title":"Catching phishers by their bait: Investigating the dutch phishing landscape through phishing kit detection","author":"bijmans","year":"2021","journal-title":"USENIX Security Symposium (USENIX Security)"},{"key":"ref14","year":"2021","journal-title":"Telegram Messenger"},{"key":"ref11","year":"2022","journal-title":"The APWG eCrime Exchange (eCX)"},{"key":"ref10","year":"2022","journal-title":"OpenPhish"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/SANER53432.2022.00116"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484765"},{"key":"ref19","year":"2019","journal-title":"phishfinder"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/ECRIME.2018.8376206"},{"key":"ref50","year":"2022","journal-title":"Phishing kits constantly evolve to evade security software"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3355369.3355585"},{"key":"ref45","year":"2022","journal-title":"Intro to Webhooks"},{"key":"ref48","article-title":"Analysis of backdoored phishing kits","author":"mccalley","year":"2011","journal-title":"International Conference on Digital Forensics (IFIP’2011)"},{"key":"ref47","author":"hunter","year":"0","journal-title":"GitHub com"},{"key":"ref42","first-page":"157","article-title":"zxcvbn: Low-Budget password strength estimation","author":"wheeler","year":"2016","journal-title":"25th USENIX Security Symposium (USENIX Security 16)"},{"key":"ref41","year":"2021","journal-title":"Whispers"},{"key":"ref44","year":"2022","journal-title":"Iok rules"},{"key":"ref43","year":"2022","journal-title":"Discord"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00049"},{"key":"ref8","author":"cashdollar","year":"2019","journal-title":"Identifying vulnerabilities in phishing kits"},{"key":"ref7","article-title":"Examining the impact of website takedown on phishing","author":"moore","year":"2007","journal-title":"APWG Symposium on Electronic Crime Research (eCrime)"},{"key":"ref9","year":"2022","journal-title":"PhishTank"},{"key":"ref4","author":"wright","year":"2017","journal-title":"Phish in a barrel Hunting and analyzing phishing kits at scale"},{"key":"ref3","article-title":"Discovering phishing dropboxes using email metadata","author":"moore","year":"2012","journal-title":"2013 APWG eCrime Researchers Summit"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978330"},{"key":"ref5","year":"2019","journal-title":"16Shop Commercial Phishing Kit Has A Hidden Backdoor"},{"key":"ref40","year":"2010","journal-title":"Shred"},{"key":"ref35","year":"2020","journal-title":"progpilot"},{"key":"ref34","year":"2022","journal-title":"sklearn cluster AgglomerativeClustering"},{"key":"ref37","year":"2021","journal-title":"Send to saved messages Cybercriminals use telegram bots and Google forms to automate phishing"},{"key":"ref36","year":"2019","journal-title":"Forcepoint"},{"key":"ref31","author":"hunt","year":"2014","journal-title":"Introducing paste searches and monitoring for “have i been pwned?”"},{"key":"ref30","year":"2022","journal-title":"email-validator Validate Email Addresses"},{"key":"ref33","year":"2022","journal-title":"sklearn preprocessing normalize"},{"key":"ref32","year":"2021","journal-title":"Have I Been Pwned?"},{"key":"ref2","year":"2022","journal-title":"Quick cheap and dangerous how scammers are creating thousands of fake pages using phishing kits"},{"key":"ref1","year":"2022","journal-title":"Phishing Activity Trends Report"},{"key":"ref39","year":"2019","journal-title":"Pdscan"},{"key":"ref38","year":"2021","journal-title":"Telegram Bot APIs"},{"key":"ref24","author":"gatlan","year":"2019","journal-title":"Phishing kits add more vulnerabilities to hacked servers"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/eCRS.2013.6805777"},{"key":"ref26","year":"0","journal-title":"Threat classification"},{"key":"ref25","year":"2022","journal-title":"VirusTotal"},{"key":"ref20","article-title":"There is no free phish: An analysis of” free” and live phishing kits","author":"cova","year":"2008","journal-title":"USENIX Workshop on Offensive Technologies (WOOT)"},{"key":"ref22","author":"lazar","year":"2018","journal-title":"Our Analysis of 1 019 Phishing Kits"},{"key":"ref21","year":"2022","journal-title":"Selenium"},{"key":"ref28","year":"2022","journal-title":"Php-parser"},{"key":"ref27","year":"2022","journal-title":"Abstract Syntax Tree"},{"key":"ref29","year":"2022","journal-title":"Phpdeobfuscator"}],"event":{"name":"2022 APWG Symposium on Electronic Crime Research (eCrime)","location":"Boston, MA, USA","start":{"date-parts":[[2022,11,30]]},"end":{"date-parts":[[2022,12,2]]}},"container-title":["2022 APWG Symposium on Electronic Crime Research (eCrime)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10141986\/10142077\/10142092.pdf?arnumber=10142092","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,6,26]],"date-time":"2023-06-26T17:57:25Z","timestamp":1687802245000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10142092\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,30]]},"references-count":50,"URL":"https:\/\/doi.org\/10.1109\/ecrime57793.2022.10142092","relation":{},"subject":[],"published":{"date-parts":[[2022,11,30]]}}}