Crafting evasive phishing URLs: exploiting tokenizer vulnerabilities in transformer-based detection systems
This paper proposes Homoglyph-Guided Beam Search (HG-BS), an adversarial attack framework that generates evasive URLs preserving both visual appearance and functional validity under strict structural constraints, and establishes that current high-accuracy URL detectors rely on fragile token patterns rather than robust semantic understanding.