Skip to content

Beyond Isolated Phishing Emails: Discovering Hidden Campaign Relationships with MCDA

· 0 citations · 36 references

TL;DR

This work proposes an analyst-oriented clustering methodology based on Multi-Criteria Decision Analysis to surface operationally meaningful relationships among phishing messages that bypassed state-of-the-art protections and shows that the resulting Multi-Dimensional Clusters are cohesive, stable, and operationally meaningful.

View source

Similar papers

2026

Detecting phishing URLs with self-organizing models

A novel, hybrid detection framework that constructs a structured “portrait” of each URL by extracting 12 discriminative features-spanning structural, semantic, technical, and morphological dimensions, addressing critical gaps in existing black-box AI systems and aligns with the stringent transparency requirements of se...

S. Buchyk, S. Toliupa, Anastasiia Shabanova et al. · 0 citations
Preprint Aug 2026

A Tree-Structured Approach for Phishing Template and Attacker Attribution Analysis

Investigating whether HTML structure can serve as a robust fingerprint for identifying phishing template reuse demonstrates that structural representations of webpages can effectively reveal hidden similarities across phishing sites, enabling the detection of emerging and zero-day templates and supporting the analysis...

Unai Agirre, Imanol Jerico, Felipe Castaño et al. · 0 citations
Preprint Aug 2026

PhiShark2026: A Multi-Layer Active-Web Raw-Evidence Dataset for Phishing Website Research

A multi-layer active-web dataset comprising 67,502 scans, including 33,387 phishing observations from operational feeds and 34,115 screened benign reference observations, provides an inspectable and reproducible foundation for future phishing measurement and dataset research.

Furkan Çolhak, Ferhat Demirkıran, Hasan Dağ et al. · 0 citations
Conference Open access 2026

Fine-Tuning LLMs for Operational Phishing Email Detection

This work provides a multi-dimensional framework for evaluating phishing detection systems and demonstrates that for most real-world applications, a multilingual, efficient encoder like XLM-RoBERTa represents the most viable and trustworthy choice.

Armand Florent Tsafack Piugie, Mathieu Valois, Emmanuel Giguet et al. · 0 citations
Open access Jul 2026

Cross-model evaluation of phishing detectors against LLM-generated emails

This work reframes cross-model phishing detection from a problem of model incompatibility to one of practical calibration, and provides two deployable solutions, threshold recalibration on a small target slice and aggregated-pool training, along with a publicly released multi-LLM corpus.

Rommel Gutierrez, W. Villegas-Ch., Jaime Govea · 0 citations
Open access Aug 2026

Phishing GAT: Adversarial-Hardened Phishing Email Detection via Semantic-Structural Fusion and Graph Attention Networks

PhishingGAT, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation, is presented, a detector that fuses word-level semantic features with structural ones and is hardened against adversarial perturbation.

R. Kodali, Siva Rama Krishna T Dr · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.