{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T12:50:45Z","timestamp":1782996645564,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,10,2]],"date-time":"2023-10-02T00:00:00Z","timestamp":1696204800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["OAC-2139358"],"award-info":[{"award-number":["OAC-2139358"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-2201465"],"award-info":[{"award-number":["CNS-2201465"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"NSF (National Science Foundation)","doi-asserted-by":"publisher","award":["CNS-2152669."],"award-info":[{"award-number":["CNS-2152669."]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,10,2]]},"DOI":"10.1145\/3570361.3613273","type":"proceedings-article","created":{"date-parts":[[2023,9,30]],"date-time":"2023-09-30T22:39:36Z","timestamp":1696113576000},"page":"1-15","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Breaking Mobile Notification-based Authentication with Concurrent Attacks Outside of Mobile Devices"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-4136-7004","authenticated-orcid":false,"given":"Ahmed Tanvir","family":"Mahdad","sequence":"first","affiliation":[{"name":"Texas A&M University, College Station, TX, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9398-3875","authenticated-orcid":false,"given":"Mohammed","family":"Jubur","sequence":"additional","affiliation":[{"name":"Jazan University, Jazan, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6083-104X","authenticated-orcid":false,"given":"Nitesh","family":"Saxena","sequence":"additional","affiliation":[{"name":"Texas A&M University, College Station, TX, United States of America"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,10,2]]},"reference":[{"key":"e_1_3_2_2_1_1","unstructured":"AO Kaspersky Lab. 2021. Kaspersky Security Cloud - Free. https:\/\/www.kaspersky.com\/free-cloud-antivirus.  AO Kaspersky Lab. 2021. Kaspersky Security Cloud - Free. https:\/\/www.kaspersky.com\/free-cloud-antivirus."},{"key":"e_1_3_2_2_2_1","unstructured":"Avast Foundation. 2021. Avast Free Antivirus. https:\/\/www.avast.com\/en-us.  Avast Foundation. 2021. Avast Free Antivirus. https:\/\/www.avast.com\/en-us."},{"key":"e_1_3_2_2_3_1","unstructured":"Avast Software s.r.o. 2021. AVG Free Antivirus. https:\/\/www.avg.com\/en-us\/.  Avast Software s.r.o. 2021. AVG Free Antivirus. https:\/\/www.avg.com\/en-us\/."},{"key":"e_1_3_2_2_4_1","unstructured":"Avira Operations GmbH & Co. KG. 2021. Avira Antivirus. https:\/\/www.avira.com\/.  Avira Operations GmbH & Co. KG. 2021. Avira Antivirus. https:\/\/www.avira.com\/."},{"key":"e_1_3_2_2_5_1","volume-title":"Annual international cryptology conference","author":"Bellare Mihir","unstructured":"Mihir Bellare and Phillip Rogaway . 1993. Entity authentication and key distribution . In Annual international cryptology conference . Springer , 232--249. Mihir Bellare and Phillip Rogaway. 1993. Entity authentication and key distribution. In Annual international cryptology conference. Springer, 232--249."},{"key":"e_1_3_2_2_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.44"},{"key":"e_1_3_2_2_7_1","doi-asserted-by":"publisher","DOI":"10.3127\/ajis.v14i1.9"},{"key":"e_1_3_2_2_8_1","unstructured":"Chrome Unboxed. 2022. These 30 malicious Chrome extensions just showed their true colors affecting millions. https:\/\/chromeunboxed.com\/color-changing-malicious-chrome-extensions.  Chrome Unboxed. 2022. These 30 malicious Chrome extensions just showed their true colors affecting millions. https:\/\/chromeunboxed.com\/color-changing-malicious-chrome-extensions."},{"key":"e_1_3_2_2_9_1","unstructured":"Chromium Project. 2021. ChromeDriver- WebDriver For Chrome. https:\/\/chromedriver.chromium.org.  Chromium Project. 2021. ChromeDriver- WebDriver For Chrome. https:\/\/chromedriver.chromium.org."},{"key":"e_1_3_2_2_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/3173574.3174030"},{"key":"e_1_3_2_2_11_1","first-page":"23","article-title":"The tangled web of password reuse","volume":"14","author":"Das Anupam","year":"2014","unstructured":"Anupam Das , Joseph Bonneau , Matthew Caesar , Nikita Borisov , and XiaoFeng Wang . 2014 . The tangled web of password reuse .. In NDSS , Vol. 14. 23 -- 26 . Anupam Das, Joseph Bonneau, Matthew Caesar, Nikita Borisov, and XiaoFeng Wang. 2014. The tangled web of password reuse.. In NDSS, Vol. 14. 23--26.","journal-title":"NDSS"},{"key":"e_1_3_2_2_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/SCC.2014.99"},{"key":"e_1_3_2_2_13_1","unstructured":"Duo. 2021. Duo Two Factor Authentication and Endpoint Security. https:\/\/duo.com.  Duo. 2021. Duo Two Factor Authentication and Endpoint Security. https:\/\/duo.com."},{"key":"e_1_3_2_2_14_1","volume-title":"Design and analysis of push notification-based malware on android. Security and Communication Networks 2018","author":"Hyun Sangwon","year":"2018","unstructured":"Sangwon Hyun , Junsung Cho , Geumhwan Cho , and Hyoungshick Kim . 2018. Design and analysis of push notification-based malware on android. Security and Communication Networks 2018 ( 2018 ). Sangwon Hyun, Junsung Cho, Geumhwan Cho, and Hyoungshick Kim. 2018. Design and analysis of push notification-based malware on android. Security and Communication Networks 2018 (2018)."},{"key":"e_1_3_2_2_15_1","unstructured":"Informa PLC Informa UK Limited. 2021. Researchers Discover Two Dozen Malicious Chrome Extensions. https:\/\/www.darkreading.com\/vulnerabilities-threats\/researchers-discover-two-dozen-malicious-chrome-extensions.  Informa PLC Informa UK Limited. 2021. Researchers Discover Two Dozen Malicious Chrome Extensions. https:\/\/www.darkreading.com\/vulnerabilities-threats\/researchers-discover-two-dozen-malicious-chrome-extensions."},{"key":"e_1_3_2_2_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453084"},{"key":"e_1_3_2_2_17_1","volume-title":"Proceedings of the 2nd USENIX Security Workshop. 5--14","author":"Klein Daniel V","year":"1990","unstructured":"Daniel V Klein . 1990 . Foiling the cracker: A survey of, and improvements to, password security . In Proceedings of the 2nd USENIX Security Workshop. 5--14 . Daniel V Klein. 1990. Foiling the cracker: A survey of, and improvements to, password security. In Proceedings of the 2nd USENIX Security Workshop. 5--14."},{"key":"e_1_3_2_2_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660302"},{"key":"e_1_3_2_2_19_1","unstructured":"Logmeln Inc. 2021. Lastpass - Password Manager & Vault App. https:\/\/www.lastpass.com\/.  Logmeln Inc. 2021. Lastpass - Password Manager & Vault App. https:\/\/www.lastpass.com\/."},{"key":"e_1_3_2_2_20_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86890-1_6"},{"key":"e_1_3_2_2_21_1","unstructured":"MalwareBytes. 2021. MalwareBytes Cybersecurity for Home and Business. https:\/\/www.malwarebytes.com\/.  MalwareBytes. 2021. MalwareBytes Cybersecurity for Home and Business. https:\/\/www.malwarebytes.com\/."},{"key":"e_1_3_2_2_22_1","unstructured":"McAfee. 2021. McAfee Total Protection. https:\/\/www.mcafee.com\/en-us\/antivirus\/free.html.  McAfee. 2021. McAfee Total Protection. https:\/\/www.mcafee.com\/en-us\/antivirus\/free.html."},{"key":"e_1_3_2_2_23_1","volume-title":"Windows Defender Antivirus","author":"Security Windows","unstructured":"Microsoft. 2021. Windows 10 Security , Windows Defender Antivirus , Windows Defender Security Centre . https:\/\/www.microsoft.com\/en-us\/windows\/comprehensive-security. Microsoft. 2021. Windows 10 Security, Windows Defender Antivirus, Windows Defender Security Centre. https:\/\/www.microsoft.com\/en-us\/windows\/comprehensive-security."},{"key":"e_1_3_2_2_24_1","unstructured":"NTT Security. 2019. Global Threat Intelligence Report. https:\/\/us.nttdata.com\/en\/-\/media\/assets\/reports\/digital-global-threat-intelligence-report-2019.pdf.  NTT Security. 2019. Global Threat Intelligence Report. https:\/\/us.nttdata.com\/en\/-\/media\/assets\/reports\/digital-global-threat-intelligence-report-2019.pdf."},{"key":"e_1_3_2_2_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/3313831.3376632"},{"key":"e_1_3_2_2_26_1","unstructured":"PhantomJS Contributors. 2010--2018. PhantomJS- Scriptable Headless Browser. https:\/\/phantomjs.org.  PhantomJS Contributors. 2010--2018. PhantomJS- Scriptable Headless Browser. https:\/\/phantomjs.org."},{"key":"e_1_3_2_2_27_1","unstructured":"PingIdentity. 2023. Identity Security for digital Enterprise | Ping ID. https:\/\/www.pingidentity.com\/en.html.  PingIdentity. 2023. Identity Security for digital Enterprise | Ping ID. https:\/\/www.pingidentity.com\/en.html."},{"key":"e_1_3_2_2_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00013"},{"key":"e_1_3_2_2_29_1","volume-title":"Proceedings of the Fifteenth Symposium on Usable Privacy and Security.","author":"Reese Ken","year":"2019","unstructured":"Ken Reese , Trevor Smith , Jonathan Dutson , Jonathan Armknecht , Jacob Cameron , and Kent Seamons . 2019 . A usability study of five two-factor authentication methods . In Proceedings of the Fifteenth Symposium on Usable Privacy and Security. Ken Reese, Trevor Smith, Jonathan Dutson, Jonathan Armknecht, Jacob Cameron, and Kent Seamons. 2019. A usability study of five two-factor authentication methods. In Proceedings of the Fifteenth Symposium on Usable Privacy and Security."},{"key":"e_1_3_2_2_30_1","unstructured":"Software Freedom Conservancy- Selenium Project. 2021. Selenium WebDriver. https:\/\/www.selenium.dev\/projects\/.  Software Freedom Conservancy- Selenium Project. 2021. Selenium WebDriver. https:\/\/www.selenium.dev\/projects\/."},{"key":"e_1_3_2_2_31_1","unstructured":"Sonicwall.com. 2021. Sonicwall Cyber Threat Report. https:\/\/www.sonicwall.com\/medialibrary\/en\/white-paper\/2021-cyber-threat-report.pdf.  Sonicwall.com. 2021. Sonicwall Cyber Threat Report. https:\/\/www.sonicwall.com\/medialibrary\/en\/white-paper\/2021-cyber-threat-report.pdf."},{"key":"e_1_3_2_2_32_1","unstructured":"Sophos Ltd. 2021. Sophos Home - Cybersecurity made simple. https:\/\/home.sophos.com\/en-us.aspx.  Sophos Ltd. 2021. Sophos Home - Cybersecurity made simple. https:\/\/home.sophos.com\/en-us.aspx."},{"key":"e_1_3_2_2_33_1","volume-title":"10th Symposium On Usable Privacy and Security ({SOUPS}","author":"Stobert Elizabeth","year":"2014","unstructured":"Elizabeth Stobert and Robert Biddle . 2014 . The password life cycle: user behaviour in managing passwords . In 10th Symposium On Usable Privacy and Security ({SOUPS} 2014). 243--255. Elizabeth Stobert and Robert Biddle. 2014. The password life cycle: user behaviour in managing passwords. In 10th Symposium On Usable Privacy and Security ({SOUPS} 2014). 243--255."},{"key":"e_1_3_2_2_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/MIPRO.2014.6859779"},{"key":"e_1_3_2_2_35_1","unstructured":"The Daily Swig. 2022. MFA fatigue attacks: Users tricked into allowing device access due to overload of push notifications. https:\/\/portswigger.net\/daily-swig\/mfa-fatigue-attacks-users-tricked-into-allowing-device-access-due-to-overload-of-push-notifications.  The Daily Swig. 2022. MFA fatigue attacks: Users tricked into allowing device access due to overload of push notifications. https:\/\/portswigger.net\/daily-swig\/mfa-fatigue-attacks-users-tricked-into-allowing-device-access-due-to-overload-of-push-notifications."},{"key":"e_1_3_2_2_36_1","unstructured":"The Hacker News. 2022. Hackers increasingly using Browser Automation Frameworks For Malicious Activities. https:\/\/thehackernews.com\/2022\/05\/hackers-increasingly-using-browser.html.  The Hacker News. 2022. Hackers increasingly using Browser Automation Frameworks For Malicious Activities. https:\/\/thehackernews.com\/2022\/05\/hackers-increasingly-using-browser.html."},{"key":"e_1_3_2_2_37_1","unstructured":"The Secret Security Wiki - Secret Double Octopus. 2021. How does Passwordless Authentication works? https:\/\/doubleoctopus.com\/security-wiki\/authentication\/passwordless-authentication\/.  The Secret Security Wiki - Secret Double Octopus. 2021. How does Passwordless Authentication works? https:\/\/doubleoctopus.com\/security-wiki\/authentication\/passwordless-authentication\/."},{"key":"e_1_3_2_2_38_1","unstructured":"ThreatPost. 2021. 500 Malicious Chrome Extensions Impact Millions of Users. https:\/\/threatpost.com\/500-malicious-chrome-extensions-millions\/152918\/.  ThreatPost. 2021. 500 Malicious Chrome Extensions Impact Millions of Users. https:\/\/threatpost.com\/500-malicious-chrome-extensions-millions\/152918\/."},{"key":"e_1_3_2_2_39_1","unstructured":"Tom Olzak. 2021. Malicious Browser Extensions: Why They Could Be the Next Big Cybersecurity Headache. https:\/\/www.spiceworks.com\/it-security\/vulnerability-management\/articles\/malicious-browser-extensions\/.  Tom Olzak. 2021. Malicious Browser Extensions: Why They Could Be the Next Big Cybersecurity Headache. https:\/\/www.spiceworks.com\/it-security\/vulnerability-management\/articles\/malicious-browser-extensions\/."},{"key":"e_1_3_2_2_40_1","unstructured":"Virustotal. 2022. Virustoal-Home. https:\/\/www.virustotal.com\/gui\/home\/upload.  Virustotal. 2022. Virustoal-Home. https:\/\/www.virustotal.com\/gui\/home\/upload."},{"key":"e_1_3_2_2_41_1","unstructured":"Zhi Xu and Sencun Zhu. 2012. Abusing Notification Services on Smartphones for Phishing and Spamming.. In WOOT. 1--11.  Zhi Xu and Sencun Zhu. 2012. Abusing Notification Services on Smartphones for Phishing and Spamming.. In WOOT. 1--11."},{"key":"e_1_3_2_2_42_1","volume-title":"a Red Ventures Company","author":"Zdnet","year":"2020","unstructured":"Zdnet , a Red Ventures Company . 2020 . Three million users installed 28 malicious Chrome or Edge extensions. https:\/\/www.zdnet.com\/article\/beef-up-microsoft-edge-with-my-favorite-add-ons\/. Zdnet, a Red Ventures Company. 2020. Three million users installed 28 malicious Chrome or Edge extensions. https:\/\/www.zdnet.com\/article\/beef-up-microsoft-edge-with-my-favorite-add-ons\/."},{"key":"e_1_3_2_2_43_1","volume-title":"a Red Ventures Company","author":"Zdnet","year":"2022","unstructured":"Zdnet , a Red Ventures Company . 2022 . Malicious Google Chrome extensions affect 1.4 million users. https:\/\/www.zdnet.com\/article\/malicious-google-chrome-extensions-affect-1-4-million-users\/. Zdnet, a Red Ventures Company. 2022. Malicious Google Chrome extensions affect 1.4 million users. https:\/\/www.zdnet.com\/article\/malicious-google-chrome-extensions-affect-1-4-million-users\/."}],"event":{"name":"ACM MobiCom '23: 29th Annual International Conference on Mobile Computing and Networking","location":"Madrid Spain","acronym":"ACM MobiCom '23","sponsor":["SIGMOBILE ACM Special Interest Group on Mobility of Systems, Users, Data and Computing"]},"container-title":["Proceedings of the 29th Annual International Conference on Mobile Computing and Networking"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3570361.3613273","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:49:28Z","timestamp":1750182568000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3570361.3613273"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,2]]},"references-count":43,"alternative-id":["10.1145\/3570361.3613273","10.1145\/3570361"],"URL":"https:\/\/doi.org\/10.1145\/3570361.3613273","relation":{},"subject":[],"published":{"date-parts":[[2023,10,2]]},"assertion":[{"value":"2023-10-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}