{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,4]],"date-time":"2025-12-04T10:05:43Z","timestamp":1764842743860,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":62,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,7,10]],"date-time":"2023-07-10T00:00:00Z","timestamp":1688947200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,7,10]]},"DOI":"10.1145\/3579856.3582831","type":"proceedings-article","created":{"date-parts":[[2023,7,5]],"date-time":"2023-07-05T14:52:13Z","timestamp":1688568733000},"page":"509-523","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["An End-to-End Analysis of Covid-Themed Scams in the Wild"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2328-6895","authenticated-orcid":false,"given":"Behzad","family":"Ousat","sequence":"first","affiliation":[{"name":"Florida International University, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0934-1664","authenticated-orcid":false,"given":"Mohammad Ali","family":"Tofighi","sequence":"additional","affiliation":[{"name":"Florida International University, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7841-3409","authenticated-orcid":false,"given":"Amin","family":"Kharraz","sequence":"additional","affiliation":[{"name":"Florida International University, United States of America"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,7,10]]},"reference":[{"volume-title":"Google Trends. https:\/\/trends.google.com\/trends. [Online","year":"2022","key":"e_1_3_2_1_1_1","unstructured":"2020. Google Trends. https:\/\/trends.google.com\/trends. [Online ; accessed 28. Aug. 2022 ]. 2020. Google Trends. https:\/\/trends.google.com\/trends. [Online; accessed 28. Aug. 2022]."},{"volume-title":"UK sees a 31% increase in cyber crime amid the pandemic. https:\/\/www.securitymagazine.com\/articles\/93722-uk-sees-a-31-increase-in-cyber-crime-amid-the-pandemic. [Online","year":"2022","key":"e_1_3_2_1_2_1","unstructured":"2020. UK sees a 31% increase in cyber crime amid the pandemic. https:\/\/www.securitymagazine.com\/articles\/93722-uk-sees-a-31-increase-in-cyber-crime-amid-the-pandemic. [Online ; accessed 27. Aug. 2022 ]. 2020. UK sees a 31% increase in cyber crime amid the pandemic. https:\/\/www.securitymagazine.com\/articles\/93722-uk-sees-a-31-increase-in-cyber-crime-amid-the-pandemic. [Online; accessed 27. Aug. 2022]."},{"volume-title":"Cybersecurity Tips for Tax Season. https:\/\/amtrustfinancial.com\/blog\/small-business\/cybersecurity-tips-for-tax-season. [Online","year":"2022","key":"e_1_3_2_1_3_1","unstructured":"2021. Cybersecurity Tips for Tax Season. https:\/\/amtrustfinancial.com\/blog\/small-business\/cybersecurity-tips-for-tax-season. [Online ; accessed 28. Aug. 2022 ]. 2021. Cybersecurity Tips for Tax Season. https:\/\/amtrustfinancial.com\/blog\/small-business\/cybersecurity-tips-for-tax-season. [Online; accessed 28. Aug. 2022]."},{"volume-title":"See Which States and Cities Have Told Residents to Stay at Home. https:\/\/www.nytimes.com\/interactive\/2020\/us\/coronavirus-stay-at-home-order.html. [Online","year":"2022","key":"e_1_3_2_1_4_1","unstructured":"2021. See Which States and Cities Have Told Residents to Stay at Home. https:\/\/www.nytimes.com\/interactive\/2020\/us\/coronavirus-stay-at-home-order.html. [Online ; accessed 28. Aug. 2022 ]. 2021. See Which States and Cities Have Told Residents to Stay at Home. https:\/\/www.nytimes.com\/interactive\/2020\/us\/coronavirus-stay-at-home-order.html. [Online; accessed 28. Aug. 2022]."},{"volume-title":"How Cybercrime Evolved Through The Pandemic: Year by Year. https:\/\/www.globalbrandsmagazine.com\/how-cybercrime-evolved-through-the-pandemic-year-by-year\/. [Online","year":"2022","key":"e_1_3_2_1_5_1","unstructured":"2022. How Cybercrime Evolved Through The Pandemic: Year by Year. https:\/\/www.globalbrandsmagazine.com\/how-cybercrime-evolved-through-the-pandemic-year-by-year\/. [Online ; accessed 27. Aug. 2022 ]. 2022. How Cybercrime Evolved Through The Pandemic: Year by Year. https:\/\/www.globalbrandsmagazine.com\/how-cybercrime-evolved-through-the-pandemic-year-by-year\/. [Online; accessed 27. Aug. 2022]."},{"key":"e_1_3_2_1_6_1","unstructured":"2022. Phishtank:Fighting against phishing. https:\/\/phishtank.org\/.  2022. Phishtank:Fighting against phishing. https:\/\/phishtank.org\/."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.techsoc.2010.07.001"},{"key":"e_1_3_2_1_8_1","volume-title":"The COVID\u201019 scamdemic: A survey of phishing attacks and their countermeasures during COVID\u201019. IET Information Security 16 (09","author":"Al\u2010Qahtani Ali","year":"2022","unstructured":"Ali Al\u2010Qahtani and Stefano Cresci . 2022. The COVID\u201019 scamdemic: A survey of phishing attacks and their countermeasures during COVID\u201019. IET Information Security 16 (09 2022 ), n\/a\u2013n\/a. https:\/\/doi.org\/10.1049\/ise2.12073 10.1049\/ise2.12073 Ali Al\u2010Qahtani and Stefano Cresci. 2022. The COVID\u201019 scamdemic: A survey of phishing attacks and their countermeasures during COVID\u201019. IET Information Security 16 (09 2022), n\/a\u2013n\/a. https:\/\/doi.org\/10.1049\/ise2.12073"},{"key":"e_1_3_2_1_9_1","volume-title":"Proceedings of the 20th International Conference on Financial Cryptography and Data Security (FC) (Barbados).","author":"Arshad Sajjad","year":"2016","unstructured":"Sajjad Arshad , Amin Kharraz , and William Robertson . 2016 . Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions . In Proceedings of the 20th International Conference on Financial Cryptography and Data Security (FC) (Barbados). Sajjad Arshad, Amin Kharraz, and William Robertson. 2016. Include Me Out: In-Browser Detection of Malicious Third-Party Content Inclusions. In Proceedings of the 20th International Conference on Financial Cryptography and Data Security (FC) (Barbados)."},{"key":"e_1_3_2_1_10_1","volume-title":"Scam Pandemic: How Attackers Exploit Public Fear through Phishing. In Proceedings of the 2020 APWG Symposium on Electronic Crime Research, eCrime 2020(eCrime Researchers Summit, eCrime)","author":"Bitaab Marzieh","year":"2020","unstructured":"Marzieh Bitaab , Haehyun Cho , Adam Oest , Penghui Zhang , Zhibo Sun , Rana Pourmohamad , Doowon Kim , Tiffany Bao , Ruoyu Wang , Yan Shoshitaishvili , Adam Doupe , and Gail Joon Ahn . 2020 . Scam Pandemic: How Attackers Exploit Public Fear through Phishing. In Proceedings of the 2020 APWG Symposium on Electronic Crime Research, eCrime 2020(eCrime Researchers Summit, eCrime) . IEEE Computer Society. Publisher Copyright : \u00a9 2020 IEEE.; 2020 APWG Symposium on Electronic Crime Research, eCrime 2020 ; Conference date: 16-11-2020 Through 19-11-2020. Marzieh Bitaab, Haehyun Cho, Adam Oest, Penghui Zhang, Zhibo Sun, Rana Pourmohamad, Doowon Kim, Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, Adam Doupe, and Gail Joon Ahn. 2020. Scam Pandemic: How Attackers Exploit Public Fear through Phishing. In Proceedings of the 2020 APWG Symposium on Electronic Crime Research, eCrime 2020(eCrime Researchers Summit, eCrime). IEEE Computer Society. Publisher Copyright: \u00a9 2020 IEEE.; 2020 APWG Symposium on Electronic Crime Research, eCrime 2020 ; Conference date: 16-11-2020 Through 19-11-2020."},{"key":"e_1_3_2_1_11_1","unstructured":"Bradley Barth. 2020. Open redirect on Dept. of HHS website benefits COVID-19 phishing scam. https:\/\/www.scmagazine.com\/home\/security-news\/cybercrime\/open-redirect-on-dept-of-hhs-website-benefits-covid-19-phishing-scam\/.  Bradley Barth. 2020. Open redirect on Dept. of HHS website benefits COVID-19 phishing scam. https:\/\/www.scmagazine.com\/home\/security-news\/cybercrime\/open-redirect-on-dept-of-hhs-website-benefits-covid-19-phishing-scam\/."},{"key":"e_1_3_2_1_12_1","volume-title":"Measuring Pay-per-Install: The Commoditization of Malware Distribution. In 20th USENIX Security Symposium (USENIX Security 11)","author":"Caballero Juan","year":"2011","unstructured":"Juan Caballero , Chris Grier , Christian Kreibich , and Vern Paxson . 2011 . Measuring Pay-per-Install: The Commoditization of Malware Distribution. In 20th USENIX Security Symposium (USENIX Security 11) . USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/conference\/usenix-security-11\/measuring-pay-install-commoditization-malware-distribution Juan Caballero, Chris Grier, Christian Kreibich, and Vern Paxson. 2011. Measuring Pay-per-Install: The Commoditization of Malware Distribution. In 20th USENIX Security Symposium (USENIX Security 11). USENIX Association, San Francisco, CA. https:\/\/www.usenix.org\/conference\/usenix-security-11\/measuring-pay-install-commoditization-malware-distribution"},{"key":"e_1_3_2_1_13_1","unstructured":"Catalin Cimpanu. 2020. State-sponsored hackers are now using coronavirus lures to infect their targets. State-sponsored hackers are now using coronavirus lures to infect their targets.  Catalin Cimpanu. 2020. State-sponsored hackers are now using coronavirus lures to infect their targets. State-sponsored hackers are now using coronavirus lures to infect their targets."},{"key":"e_1_3_2_1_14_1","unstructured":"Covenant HealthCovenant Health. 2020. World Health Organization Warns of Coronavirus (COVID-19) Phishing Attacks. https:\/\/covenanthealth.com\/world-health-organization-who-warns-of-coronavirus-covid-19-phishing-attacks\/.  Covenant HealthCovenant Health. 2020. World Health Organization Warns of Coronavirus (COVID-19) Phishing Attacks. https:\/\/covenanthealth.com\/world-health-organization-who-warns-of-coronavirus-covid-19-phishing-attacks\/."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813703"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663755"},{"key":"e_1_3_2_1_17_1","volume-title":"Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC\u201913)","author":"Durumeric Zakir","year":"2013","unstructured":"Zakir Durumeric , Eric Wustrow , and J.\u00a0 Alex Halderman . 2013 . ZMap: Fast Internet-Wide Scanning and Its Security Applications . In Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC\u201913) . USENIX Association, USA, 605\u2013620. Zakir Durumeric, Eric Wustrow, and J.\u00a0Alex Halderman. 2013. ZMap: Fast Internet-Wide Scanning and Its Security Applications. In Proceedings of the 22nd USENIX Conference on Security (Washington, D.C.) (SEC\u201913). USENIX Association, USA, 605\u2013620."},{"key":"e_1_3_2_1_18_1","unstructured":"Google Development. 2017. Extending DevTools. https:\/\/developer.chrome.com\/extensions\/devtools.  Google Development. 2017. Extending DevTools. https:\/\/developer.chrome.com\/extensions\/devtools."},{"key":"e_1_3_2_1_19_1","volume-title":"Be Alert for Cyber Crime during Tax Season. https:\/\/rueseinsurancegroup.com\/be-alert-for-cyber-crime-during-tax-season\/. [Online","author":"RUESE GROUP.","year":"2022","unstructured":"RUESE GROUP. 2022. Be Alert for Cyber Crime during Tax Season. https:\/\/rueseinsurancegroup.com\/be-alert-for-cyber-crime-during-tax-season\/. [Online ; accessed 28. Aug. 2022 ]. RUESE GROUP. 2022. Be Alert for Cyber Crime during Tax Season. https:\/\/rueseinsurancegroup.com\/be-alert-for-cyber-crime-during-tax-season\/. [Online; accessed 28. Aug. 2022]."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1764873.1764877"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068856"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/276698.276876"},{"key":"e_1_3_2_1_24_1","unstructured":"Jessica Davis. 2020. Another COVID-19 Research Firm Targeted by Ransomware Attack. https:\/\/healthitsecurity.com\/news\/another-covid-19-research-firm-targeted-by-ransomware-attack.  Jessica Davis. 2020. Another COVID-19 Research Firm Targeted by Ransomware Attack. https:\/\/healthitsecurity.com\/news\/another-covid-19-research-firm-targeted-by-ransomware-attack."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of 10th international conference on digital strategies for organizational success.","author":"Khan Dr","year":"2019","unstructured":"Dr Khan and W Shazia . 2019 . Cyber security issues and challenges in E-commerce . In Proceedings of 10th international conference on digital strategies for organizational success. Dr Khan and W Shazia. 2019. Cyber security issues and challenges in E-commerce. In Proceedings of 10th international conference on digital strategies for organizational success."},{"key":"e_1_3_2_1_26_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Kharraz Amin","year":"2016","unstructured":"Amin Kharraz , Sajjad Arshad , Collin Mulliner , William Robertson , and Engin Kirda . 2016 . UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware . In 25th USENIX Security Symposium (USENIX Security 16) . USENIX Association, 757\u2013772. Amin Kharraz, Sajjad Arshad, Collin Mulliner, William Robertson, and Engin Kirda. 2016. UNVEIL: A Large-Scale, Automated Approach to Detecting Ransomware. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, 757\u2013772."},{"key":"e_1_3_2_1_27_1","volume-title":"Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild. In The Proceedings of the 2019 World Wide Web Conference (WWW \u201919)","author":"Kharraz Amin","year":"2019","unstructured":"Amin Kharraz , Zane Ma , Paul Murley , Charles Lever , Joshua Mason , Andrew Miller , Manos Antonakakis , and Michael Bailey . 2019 . Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild. In The Proceedings of the 2019 World Wide Web Conference (WWW \u201919) . San Francisco, CA. Amin Kharraz, Zane Ma, Paul Murley, Charles Lever, Joshua Mason, Andrew Miller, Manos Antonakakis, and Michael Bailey. 2019. Outguard: Detecting In-Browser Covert Cryptocurrency Mining in the Wild. In The Proceedings of the 2019 World Wide Web Conference (WWW \u201919). San Francisco, CA."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-20550-2_1"},{"key":"e_1_3_2_1_29_1","volume-title":"Surveylance: Automatically Detecting Online Survey Scams. In 2018 IEEE Symposium on Security and Privacy (SP). 70\u201386","author":"Kharraz Amin","year":"2018","unstructured":"Amin Kharraz , William Robertson , and Engin Kirda . 2018 . Surveylance: Automatically Detecting Online Survey Scams. In 2018 IEEE Symposium on Security and Privacy (SP). 70\u201386 . Amin Kharraz, William Robertson, and Engin Kirda. 2018. Surveylance: Automatically Detecting Online Survey Scams. In 2018 IEEE Symposium on Security and Privacy (SP). 70\u201386."},{"key":"e_1_3_2_1_30_1","volume-title":"25th USENIX Security Symposium (USENIX Security 16)","author":"Kotzias Platon","year":"2016","unstructured":"Platon Kotzias , Leyla Bilge , and Juan Caballero . 2016 . Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/kotzias . In 25th USENIX Security Symposium (USENIX Security 16) . USENIX Association, Austin, TX, 739\u2013756. Platon Kotzias, Leyla Bilge, and Juan Caballero. 2016. Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services. https:\/\/www.usenix.org\/conference\/usenixsecurity16\/technical-sessions\/presentation\/kotzias. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, Austin, TX, 739\u2013756."},{"key":"e_1_3_2_1_31_1","volume-title":"USENIX Security Symposium. 739\u2013756","author":"Kotzias Platon","year":"2016","unstructured":"Platon Kotzias , Leyla Bilge , and Juan Caballero . 2016 . Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services .. In USENIX Security Symposium. 739\u2013756 . Platon Kotzias, Leyla Bilge, and Juan Caballero. 2016. Measuring PUP Prevalence and PUP Distribution through Pay-Per-Install Services.. In USENIX Security Symposium. 739\u2013756."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813724"},{"key":"e_1_3_2_1_33_1","volume-title":"Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic. Computers & Security 105 (jun","author":"Lallie Harjinder\u00a0Singh","year":"2021","unstructured":"Harjinder\u00a0Singh Lallie , Lynsay\u00a0 A. Shepherd , Jason\u00a0 R.C. Nurse , Arnau Erola , Gregory Epiphaniou , Carsten Maple , and Xavier Bellekens . 2021. Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic. Computers & Security 105 (jun 2021 ), 102248. https:\/\/doi.org\/10.1016\/j.cose.2021.102248 10.1016\/j.cose.2021.102248 Harjinder\u00a0Singh Lallie, Lynsay\u00a0A. Shepherd, Jason\u00a0R.C. Nurse, Arnau Erola, Gregory Epiphaniou, Carsten Maple, and Xavier Bellekens. 2021. Cyber security in the age of COVID-19: A timeline and analysis of cyber-crime and cyber-attacks during the pandemic. Computers & Security 105 (jun 2021), 102248. https:\/\/doi.org\/10.1016\/j.cose.2021.102248"},{"key":"e_1_3_2_1_34_1","unstructured":"John Leyden. 2021. Ransomware attacks more than doubled last year as cybercrime operations scale up during coronavirus pandemic. https:\/\/portswigger.net\/daily-swig\/ransomware-attacks-more-than-doubled-last-year-as-cybercrime-operations-scale-up-during-coronavirus-pandemic. [Online; accessed 27. Aug. 2022].  John Leyden. 2021. Ransomware attacks more than doubled last year as cybercrime operations scale up during coronavirus pandemic. https:\/\/portswigger.net\/daily-swig\/ransomware-attacks-more-than-doubled-last-year-as-cybercrime-operations-scale-up-during-coronavirus-pandemic. [Online; accessed 27. Aug. 2022]."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382267"},{"key":"e_1_3_2_1_36_1","unstructured":"Paul Mee and Rico Brandenburg. 2020. CYBER RISK GROWS AS CRIMINALS EXPLOIT CORONAVIRUS CRISIS. https:\/\/www.oliverwyman.com\/our-expertise\/insights\/2020\/apr\/risk-journal-vol-9\/rethinking-tactics\/cyber-risk-grows-as-criminals-exploit-coronavirus-crisis.html. [Online; accessed 27. Aug. 2022].  Paul Mee and Rico Brandenburg. 2020. CYBER RISK GROWS AS CRIMINALS EXPLOIT CORONAVIRUS CRISIS. https:\/\/www.oliverwyman.com\/our-expertise\/insights\/2020\/apr\/risk-journal-vol-9\/rethinking-tactics\/cyber-risk-grows-as-criminals-exploit-coronavirus-crisis.html. [Online; accessed 27. Aug. 2022]."},{"key":"e_1_3_2_1_37_1","unstructured":"Microsoft Corporation. 2017. Cognitive Services Pricing \u2013 Bing Search API. https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/cognitive-services\/search-api\/web\/.  Microsoft Corporation. 2017. Cognitive Services Pricing \u2013 Bing Search API. https:\/\/azure.microsoft.com\/en-us\/pricing\/details\/cognitive-services\/search-api\/web\/."},{"key":"e_1_3_2_1_38_1","volume-title":"Dial one for scam: A large-scale analysis of technical support scams. arXiv preprint arXiv:1607.06891","author":"Miramirkhani Najmeh","year":"2016","unstructured":"Najmeh Miramirkhani , Oleksii Starov , and Nick Nikiforakis . 2016. Dial one for scam: A large-scale analysis of technical support scams. arXiv preprint arXiv:1607.06891 ( 2016 ). Najmeh Miramirkhani, Oleksii Starov, and Nick Nikiforakis. 2016. Dial one for scam: A large-scale analysis of technical support scams. arXiv preprint arXiv:1607.06891 (2016)."},{"key":"e_1_3_2_1_39_1","volume-title":"Dial One for Scam: Analyzing and Detecting Technical Support Scams. CoRR abs\/1607.06891","author":"Miramirkhani Najmeh","year":"2016","unstructured":"Najmeh Miramirkhani , Oleksii Starov , and Nick Nikiforakis . 2016. Dial One for Scam: Analyzing and Detecting Technical Support Scams. CoRR abs\/1607.06891 ( 2016 ). arXiv:1607.06891http:\/\/arxiv.org\/abs\/1607.06891 Najmeh Miramirkhani, Oleksii Starov, and Nick Nikiforakis. 2016. Dial One for Scam: Analyzing and Detecting Technical Support Scams. CoRR abs\/1607.06891 (2016). arXiv:1607.06891http:\/\/arxiv.org\/abs\/1607.06891"},{"key":"e_1_3_2_1_40_1","volume-title":"Towards Measuring and Mitigating Social Engineering Software Download Attacks. In 25th USENIX Security Symposium (USENIX Security 16)","author":"Nelms Terry","year":"2016","unstructured":"Terry Nelms , Roberto Perdisci , Manos Antonakakis , and Mustaque Ahamad . 2016 . Towards Measuring and Mitigating Social Engineering Software Download Attacks. In 25th USENIX Security Symposium (USENIX Security 16) . USENIX Association, Austin, TX, 773\u2013789. Terry Nelms, Roberto Perdisci, Manos Antonakakis, and Mustaque Ahamad. 2016. Towards Measuring and Mitigating Social Engineering Software Download Attacks. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, Austin, TX, 773\u2013789."},{"key":"e_1_3_2_1_41_1","volume-title":"Proceedings of the 23rd international conference on World wide web. ACM, 51\u201362","author":"Nikiforakis Nick","year":"2014","unstructured":"Nick Nikiforakis , Federico Maggi , Gianluca Stringhini , M\u00a0Zubair Rafique , Wouter Joosen , Christopher Kruegel , Frank Piessens , Giovanni Vigna , and Stefano Zanero . 2014 . Stranger danger: exploring the ecosystem of ad-based url shortening services . In Proceedings of the 23rd international conference on World wide web. ACM, 51\u201362 . Nick Nikiforakis, Federico Maggi, Gianluca Stringhini, M\u00a0Zubair Rafique, Wouter Joosen, Christopher Kruegel, Frank Piessens, Giovanni Vigna, and Stefano Zanero. 2014. Stranger danger: exploring the ecosystem of ad-based url shortening services. In Proceedings of the 23rd international conference on World wide web. ACM, 51\u201362."},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2013.08.031"},{"key":"e_1_3_2_1_43_1","volume-title":"Cybercrime is thriving during the pandemic, driven by surge in phishing and ransomware. https:\/\/www.cbsnews.com\/news\/ransomware-phishing-cybercrime-pandemic\/. [Online","author":"DAN PATTERSON.","year":"2022","unstructured":"DAN PATTERSON. 2021. Cybercrime is thriving during the pandemic, driven by surge in phishing and ransomware. https:\/\/www.cbsnews.com\/news\/ransomware-phishing-cybercrime-pandemic\/. [Online ; accessed 27. Aug. 2022 ]. DAN PATTERSON. 2021. Cybercrime is thriving during the pandemic, driven by surge in phishing and ransomware. https:\/\/www.cbsnews.com\/news\/ransomware-phishing-cybercrime-pandemic\/. [Online; accessed 27. Aug. 2022]."},{"key":"e_1_3_2_1_44_1","volume-title":"Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10","author":"Mehedi\u00a0Ahsan Pritom Mir","year":"2020","unstructured":"Mir Mehedi\u00a0Ahsan Pritom , Kristin\u00a0 M. Schweitzer , Raymond\u00a0 M. Bateman , Min Xu , and Shouhuai Xu . 2020 . Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10 .1109\/isi49825.2020.9280539 10.1109\/isi49825.2020.9280539 Mir Mehedi\u00a0Ahsan Pritom, Kristin\u00a0M. Schweitzer, Raymond\u00a0M. Bateman, Min Xu, and Shouhuai Xu. 2020. Characterizing the Landscape of COVID-19 Themed Cyberattacks and Defenses. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10.1109\/isi49825.2020.9280539"},{"key":"e_1_3_2_1_45_1","volume-title":"Data-Driven Characterization and Detection of COVID-19 Themed Malicious Websites. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10","author":"Mehedi\u00a0Ahsan Pritom Mir","year":"2020","unstructured":"Mir Mehedi\u00a0Ahsan Pritom , Kristin\u00a0 M. Schweitzer , Raymond\u00a0 M. Bateman , Min Xu , and Shouhuai Xu . 2020 . Data-Driven Characterization and Detection of COVID-19 Themed Malicious Websites. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10 .1109\/isi49825.2020.9280522 10.1109\/isi49825.2020.9280522 Mir Mehedi\u00a0Ahsan Pritom, Kristin\u00a0M. Schweitzer, Raymond\u00a0M. Bateman, Min Xu, and Shouhuai Xu. 2020. Data-Driven Characterization and Detection of COVID-19 Themed Malicious Websites. In 2020 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE. https:\/\/doi.org\/10.1109\/isi49825.2020.9280522"},{"key":"e_1_3_2_1_46_1","volume-title":"Proceedings of the 15th Conference on Systems Administration (LISA 2001","author":"Provos Niels","year":"2001","unstructured":"Niels Provos and Peter Honeyman . 2001 . ScanSSH: Scanning the Internet for SSH Servers . In Proceedings of the 15th Conference on Systems Administration (LISA 2001 ), San Diego, California, USA , December 2-7, 2001. 25\u201330. Niels Provos and Peter Honeyman. 2001. ScanSSH: Scanning the Internet for SSH Servers. In Proceedings of the 15th Conference on Systems Administration (LISA 2001), San Diego, California, USA, December 2-7, 2001. 25\u201330."},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897845.2897918"},{"key":"e_1_3_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.3390\/fi11040089"},{"key":"e_1_3_2_1_49_1","unstructured":"VirusTotal\u00a0Online Service. [n. d.]. VirusTotal. https:\/\/www.virustotal.com\/gui\/home.  VirusTotal\u00a0Online Service. [n. d.]. VirusTotal. https:\/\/www.virustotal.com\/gui\/home."},{"key":"e_1_3_2_1_50_1","first-page":"652","article-title":"Impact Of Cybercrime In E-Business And","volume":"9","author":"Setiawan Nashrudin","year":"2018","unstructured":"Nashrudin Setiawan , Vita Cita\u00a0Emia Tarigan , Pipit\u00a0Buana Sari , Yossie Rossanty , MDTP Nasution , and Ilhamsyah Siregar . 2018 . Impact Of Cybercrime In E-Business And Trust. Int. J. Civ. Eng. Technol 9 , 7 (2018), 652 \u2013 656 . Nashrudin Setiawan, Vita Cita\u00a0Emia Tarigan, Pipit\u00a0Buana Sari, Yossie Rossanty, MDTP Nasution, and Ilhamsyah Siregar. 2018. Impact Of Cybercrime In E-Business And Trust. Int. J. Civ. Eng. Technol 9, 7 (2018), 652\u2013656.","journal-title":"Trust. Int. J. Civ. Eng. Technol"},{"key":"e_1_3_2_1_51_1","unstructured":"Kevin Springborn and Paul Barford. 2013. Impression Fraud in On-line Advertising via Pay-Per-View Networks.. In USENIX Security. 211\u2013226.  Kevin Springborn and Paul Barford. 2013. Impression Fraud in On-line Advertising via Pay-Per-View Networks.. In USENIX Security. 211\u2013226."},{"volume-title":"The underground economy of fake antivirus software","author":"Stone-Gross Brett","key":"e_1_3_2_1_52_1","unstructured":"Brett Stone-Gross , Ryan Abman , Richard\u00a0 A Kemmerer , Christopher Kruegel , Douglas\u00a0 G Steigerwald , and Giovanni Vigna . 2013. The underground economy of fake antivirus software . In Economics of Information Security and Privacy III. Springer , 55\u201378. Brett Stone-Gross, Ryan Abman, Richard\u00a0A Kemmerer, Christopher Kruegel, Douglas\u00a0G Steigerwald, and Giovanni Vigna. 2013. The underground economy of fake antivirus software. In Economics of Information Security and Privacy III. Springer, 55\u201378."},{"key":"e_1_3_2_1_53_1","volume-title":"Beware of \u2019Coronavirus Maps","author":"News The Hacker","year":"2020","unstructured":"The Hacker News . 2020. Beware of \u2019Coronavirus Maps \u2019 \u2013 It\u2019s a malware infecting PCs to steal passwords. https:\/\/thehackernews.com\/ 2020 \/03\/coronavirus-maps-covid-19.html. The Hacker News. 2020. Beware of \u2019Coronavirus Maps\u2019 \u2013 It\u2019s a malware infecting PCs to steal passwords. https:\/\/thehackernews.com\/2020\/03\/coronavirus-maps-covid-19.html."},{"key":"e_1_3_2_1_54_1","volume-title":"Security and Privacy (SP), 2015 IEEE Symposium on. IEEE, 151\u2013167","author":"Thomas Kurt","year":"2015","unstructured":"Kurt Thomas , Elie Bursztein , Chris Grier , Grant Ho , Nav Jagpal , Alexandros Kapravelos , Damon McCoy , Antonio Nappa , Vern Paxson , Paul Pearce , 2015 . Ad injection at scale: Assessing deceptive advertisement modifications . In Security and Privacy (SP), 2015 IEEE Symposium on. IEEE, 151\u2013167 . Kurt Thomas, Elie Bursztein, Chris Grier, Grant Ho, Nav Jagpal, Alexandros Kapravelos, Damon McCoy, Antonio Nappa, Vern Paxson, Paul Pearce, 2015. Ad injection at scale: Assessing deceptive advertisement modifications. In Security and Privacy (SP), 2015 IEEE Symposium on. IEEE, 151\u2013167."},{"key":"e_1_3_2_1_55_1","volume-title":"USENIX Security Symposium. 721\u2013739","author":"Thomas Kurt","year":"2016","unstructured":"Kurt Thomas , Juan A\u00a0Elices Crespo , Ryan Rasti , Jean\u00a0Michel Picod , Cait Phillips , Marc-Andr\u00e9 Decoste , Chris Sharp , Fabio Tirelo , Ali Tofigh , Marc-Antoine Courteau , 2016 . Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software .. In USENIX Security Symposium. 721\u2013739 . Kurt Thomas, Juan A\u00a0Elices Crespo, Ryan Rasti, Jean\u00a0Michel Picod, Cait Phillips, Marc-Andr\u00e9 Decoste, Chris Sharp, Fabio Tirelo, Ali Tofigh, Marc-Antoine Courteau, 2016. Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software.. In USENIX Security Symposium. 721\u2013739."},{"key":"e_1_3_2_1_56_1","volume-title":"Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software. In 25th USENIX Security Symposium (USENIX Security 16)","author":"Thomas Kurt","year":"2016","unstructured":"Kurt Thomas , Juan A.\u00a0 Elices Crespo , Ryan Rasti , Jean-Michel Picod , Cait Phillips , Marc-Andr\u00e9 Decoste , Chris Sharp , Fabio Tirelo , Ali Tofigh , Marc-Antoine Courteau , Lucas Ballard , Robert Shield , Nav Jagpal , Moheeb\u00a0Abu Rajab , Panayiotis Mavrommatis , Niels Provos , Elie Bursztein , and Damon McCoy . 2016 . Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software. In 25th USENIX Security Symposium (USENIX Security 16) . USENIX Association, Austin, TX, 721\u2013739. Kurt Thomas, Juan A.\u00a0Elices Crespo, Ryan Rasti, Jean-Michel Picod, Cait Phillips, Marc-Andr\u00e9 Decoste, Chris Sharp, Fabio Tirelo, Ali Tofigh, Marc-Antoine Courteau, Lucas Ballard, Robert Shield, Nav Jagpal, Moheeb\u00a0Abu Rajab, Panayiotis Mavrommatis, Niels Provos, Elie Bursztein, and Damon McCoy. 2016. Investigating Commercial Pay-Per-Install and the Distribution of Unwanted Software. In 25th USENIX Security Symposium (USENIX Security 16). USENIX Association, Austin, TX, 721\u2013739."},{"key":"e_1_3_2_1_57_1","unstructured":"ThreatMicro Inc.2020. Emotet Uses Coronavirus Scare in Latest Campaign Targets Japan. https:\/\/www.trendmicro.com\/vinfo\/mx\/security\/news\/cybercrime-and-digital-threats\/emotet-uses-coronavirus-scare-in-latest-campaign-targets-japan.  ThreatMicro Inc.2020. Emotet Uses Coronavirus Scare in Latest Campaign Targets Japan. https:\/\/www.trendmicro.com\/vinfo\/mx\/security\/news\/cybercrime-and-digital-threats\/emotet-uses-coronavirus-scare-in-latest-campaign-targets-japan."},{"key":"e_1_3_2_1_58_1","volume-title":"Amid covid-19, global orgs see a 148% spike in ransomware attacks","author":"Upatham P","year":"2020","unstructured":"P Upatham and J Treinen . 2020. Amid covid-19, global orgs see a 148% spike in ransomware attacks ; finance industry heavily targeted. https:\/\/blogs.vmware.com\/security\/ 2020 \/04\/amid-covid-19-global-orgs-see-a-148-spike-in-ransomware-attacks-finance-industry-heavily-targeted.html. [Online; accessed 27. Aug. 2022]. P Upatham and J Treinen. 2020. Amid covid-19, global orgs see a 148% spike in ransomware attacks; finance industry heavily targeted. https:\/\/blogs.vmware.com\/security\/2020\/04\/amid-covid-19-global-orgs-see-a-148-spike-in-ransomware-attacks-finance-industry-heavily-targeted.html. [Online; accessed 27. Aug. 2022]."},{"key":"e_1_3_2_1_59_1","volume-title":"Image Quality Assessment: From Error Visibility to Structural Similarity. Image Processing","author":"Wang Zhou","year":"2004","unstructured":"Zhou Wang , Alan Bovik , Hamid Sheikh , and Eero Simoncelli . 2004. Image Quality Assessment: From Error Visibility to Structural Similarity. Image Processing , IEEE Transactions on 13 (05 2004 ), 600 \u2013 612. https:\/\/doi.org\/10.1109\/TIP.2003.819861 10.1109\/TIP.2003.819861 Zhou Wang, Alan Bovik, Hamid Sheikh, and Eero Simoncelli. 2004. Image Quality Assessment: From Error Visibility to Structural Similarity. Image Processing, IEEE Transactions on 13 (05 2004), 600 \u2013 612. https:\/\/doi.org\/10.1109\/TIP.2003.819861"},{"key":"e_1_3_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.1109\/eCrime51433.2020.9493255"},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2736277.2741630"},{"key":"e_1_3_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1145\/2663716.2663719"},{"key":"e_1_3_2_1_63_1","volume-title":"2021 IEEE Symposium on Security and Privacy (SP). IEEE, 1109\u20131124","author":"Zhang Penghui","year":"2021","unstructured":"Penghui Zhang , Adam Oest , Haehyun Cho , Zhibo Sun , RC Johnson , Brad Wardman , Shaown Sarker , Alexandros Kapravelos , Tiffany Bao , Ruoyu Wang , 2021 . Crawlphish: Large-scale analysis of client-side cloaking techniques in phishing . In 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 1109\u20131124 . Penghui Zhang, Adam Oest, Haehyun Cho, Zhibo Sun, RC Johnson, Brad Wardman, Shaown Sarker, Alexandros Kapravelos, Tiffany Bao, Ruoyu Wang, 2021. Crawlphish: Large-scale analysis of client-side cloaking techniques in phishing. In 2021 IEEE Symposium on Security and Privacy (SP). IEEE, 1109\u20131124."}],"event":{"name":"ASIA CCS '23: ACM ASIA Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Melbourne VIC Australia","acronym":"ASIA CCS '23"},"container-title":["Proceedings of the ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579856.3582831","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:51:28Z","timestamp":1750182688000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3579856.3582831"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,10]]},"references-count":62,"alternative-id":["10.1145\/3579856.3582831","10.1145\/3579856"],"URL":"https:\/\/doi.org\/10.1145\/3579856.3582831","relation":{},"subject":[],"published":{"date-parts":[[2023,7,10]]},"assertion":[{"value":"2023-07-10","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}