A Study of Recent Techniques to Detect Zero-Day Phishing Attacks
Sharvari Patil, Narendra M. Shekokar · 2023
Phishing is a cybercrime wherein the attacker steals an individual’s information causing financial or personal loss to the individual. Confidential information like banking, credit/debit card details, passwords is stolen by making simple changes in the URL. Attackers might gain access to the personal information of the victim causing damage to the individual. Considering the recent pandemic situation, most individuals are switching to online banking operations which makes it the most attractive platform for phishers. Online services are being used by all from youngsters to elderly people making them a hotspot of cybercrime activities. In addition to this, there is little risk involved in executing phishing attacks and they pay high returns to the attacker. There are various anti-phishing tools and techniques available but most of them use the blacklisting approach, where the phishing URLs are blacklisted from the previous history, but this software fails to identify a zero-day phishing attack. There is no solution with foolproof accuracy in detecting phishing attacks. In the advent of new technologies like ML, DL, and AI various schemes have been developed to detect phishing. We will discuss in brief various systems developed by researchers using recent technologies. We will also discuss how the threat actors may use these technologies to bypass AI phishing detection systems.