{"id":"https://openalex.org/W4409917132","doi":"https://doi.org/10.1109/access.2025.3565619","title":"Decoding Phishing Evasion: Analyzing Attacker Strategies to Circumvent Detection Systems","display_name":"Decoding Phishing Evasion: Analyzing Attacker Strategies to Circumvent Detection Systems","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4409917132","doi":"https://doi.org/10.1109/access.2025.3565619"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3565619","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565619","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3565619","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064268028","display_name":"Abdul Ghafoor","orcid":"https://orcid.org/0000-0002-6117-3656"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"A. Ghafoor","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022535739","display_name":"Munam Ali Shah","orcid":"https://orcid.org/0000-0002-4037-3405"},"institutions":[{"id":"https://openalex.org/I4626487","display_name":"King Faisal University","ror":"https://ror.org/00dn43547","country_code":"SA","type":"education","lineage":["https://openalex.org/I4626487"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"M. A. Shah","raw_affiliation_strings":["Department of Computer Networks and Communication, King Faisal University (KFU), Al Ahsa, Saudi Arabia","Department of Computer Networks & Communication, King Faisal University (KFU), Al-Ahsa, Suadi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-4037-3405","affiliations":[{"raw_affiliation_string":"Department of Computer Networks and Communication, King Faisal University (KFU), Al Ahsa, Saudi Arabia","institution_ids":["https://openalex.org/I4626487"]},{"raw_affiliation_string":"Department of Computer Networks & Communication, King Faisal University (KFU), Al-Ahsa, Suadi Arabia","institution_ids":["https://openalex.org/I4626487"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049995499","display_name":"Mohammed Al-Naeem","orcid":"https://orcid.org/0000-0002-5682-6237"},"institutions":[{"id":"https://openalex.org/I4626487","display_name":"King Faisal University","ror":"https://ror.org/00dn43547","country_code":"SA","type":"education","lineage":["https://openalex.org/I4626487"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"M. A. Al-Naeem","raw_affiliation_strings":["Department of Computer Networks and Communication, King Faisal University (KFU), Al Ahsa, Saudi Arabia","Department of Computer Networks & Communication, King Faisal University (KFU), Al-Ahsa, Suadi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-5682-6237","affiliations":[{"raw_affiliation_string":"Department of Computer Networks and Communication, King Faisal University (KFU), Al Ahsa, Saudi Arabia","institution_ids":["https://openalex.org/I4626487"]},{"raw_affiliation_string":"Department of Computer Networks & Communication, King Faisal University (KFU), Al-Ahsa, Suadi Arabia","institution_ids":["https://openalex.org/I4626487"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080175512","display_name":"Carsten Maple","orcid":"https://orcid.org/0000-0002-4715-212X"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"C. Maple","raw_affiliation_strings":["WMG, University of Warwick, Coventry, U.K","WMG, University of Warwick, Coventry, UK"],"raw_orcid":"https://orcid.org/0000-0002-4715-212X","affiliations":[{"raw_affiliation_string":"WMG, University of Warwick, Coventry, U.K","institution_ids":["https://openalex.org/I39555362"]},{"raw_affiliation_string":"WMG, University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.9086,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.8595709,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"13","issue":null,"first_page":"78513","last_page":"78526"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9747999906539917,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.9247999787330627,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7554999589920044},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.7484601736068726},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.6661070585250854},{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.6032383441925049},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5874931812286377},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.48309850692749023},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.19117531180381775},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.17927983403205872},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.09533151984214783}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7554999589920044},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.7484601736068726},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.6661070585250854},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.6032383441925049},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5874931812286377},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.48309850692749023},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.19117531180381775},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.17927983403205872},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.09533151984214783},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3565619","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565619","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bcc55497e778463e973cadcb3c54de31","is_oa":true,"landing_page_url":"https://doaj.org/article/bcc55497e778463e973cadcb3c54de31","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 78513-78526 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3565619","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3565619","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1309768829","display_name":null,"funder_award_id":"EP/N510129/1.","funder_id":"https://openalex.org/F4320313467","funder_display_name":"Alan Turing Institute"},{"id":"https://openalex.org/G2613656963","display_name":null,"funder_award_id":"KFU251500","funder_id":"https://openalex.org/F4320322804","funder_display_name":"Deanship of Scientific Research, King Faisal University"},{"id":"https://openalex.org/G6685722554","display_name":null,"funder_award_id":"EP/V056883/1","funder_id":"https://openalex.org/F4320313467","funder_display_name":"Alan Turing Institute"}],"funders":[{"id":"https://openalex.org/F4320313467","display_name":"Alan Turing Institute","ror":"https://ror.org/035dkdb55"},{"id":"https://openalex.org/F4320322804","display_name":"Deanship of Scientific Research, King Faisal University","ror":"https://ror.org/00dn43547"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1970008513","https://openalex.org/W2072981546","https://openalex.org/W2095795257","https://openalex.org/W2166711196","https://openalex.org/W2567869469","https://openalex.org/W2577022733","https://openalex.org/W2612460748","https://openalex.org/W2741760549","https://openalex.org/W2766435576","https://openalex.org/W2768718986","https://openalex.org/W2773407602","https://openalex.org/W2774114527","https://openalex.org/W2780468994","https://openalex.org/W2784038944","https://openalex.org/W2797283471","https://openalex.org/W2800005718","https://openalex.org/W2884020303","https://openalex.org/W2896978535","https://openalex.org/W2904371362","https://openalex.org/W2911408902","https://openalex.org/W2978893826","https://openalex.org/W2994673331","https://openalex.org/W2995699046","https://openalex.org/W2997555838","https://openalex.org/W3005900565","https://openalex.org/W3012459057","https://openalex.org/W3024685416","https://openalex.org/W3135655885","https://openalex.org/W3156586340","https://openalex.org/W4400602335"],"related_works":["https://openalex.org/W2149202530","https://openalex.org/W2807822918","https://openalex.org/W2921723332","https://openalex.org/W4391093354","https://openalex.org/W2482950156","https://openalex.org/W4396966040","https://openalex.org/W2305322260","https://openalex.org/W3139248031","https://openalex.org/W3042334625","https://openalex.org/W4200017362"],"abstract_inverted_index":{"Phishing":[0],"remains":[1],"a":[2,64,143,152,159],"critical":[3,144],"security":[4,60,148],"threat,":[5],"involving":[6],"the":[7,34,48,96,105,122,131],"creation":[8],"of":[9,37,51,66,90,98,107,136],"fraudulent":[10],"websites":[11],"to":[12,46,92,110,154,165],"capture":[13],"sensitive":[14],"information.":[15],"Despite":[16],"existing":[17],"detection":[18,71,127],"systems,":[19],"sophisticated":[20,170],"attackers":[21,44],"have":[22,102],"developed":[23],"advanced":[24],"evasion":[25,83],"techniques":[26],"that":[27,81,129],"undermine":[28],"these":[29,38,82,111,169],"defenses.":[30],"This":[31],"paper":[32],"highlights":[33,142],"significant":[35],"challenge":[36,153],"novel":[39,163],"methods,":[40],"focusing":[41],"on":[42],"how":[43],"manage":[45],"prolong":[47],"operational":[49],"lifespan":[50],"phishing":[52,99,138,171],"sites.":[53,100],"Our":[54,77,140],"research":[55],"investigates":[56],"howattackers":[57],"circumvent":[58],"traditional":[59],"layers":[61],"by":[62],"employing":[63],"combination":[65],"target":[67],"filtering":[68],"mechanisms,":[69],"bot":[70],"evasion,":[72],"blacklisting":[73],"avoidance,":[74],"and":[75,116,133,150],"honeypots.":[76],"experimental":[78],"findings":[79],"indicate":[80],"strategies":[84],"can":[85],"achieve":[86],"an":[87],"effectiveness":[88],"rate":[89],"80%":[91],"85%":[93],"in":[94,146],"extending":[95],"viability":[97],"We":[101],"empirically":[103],"demonstrated":[104],"exposure":[106],"current":[108,147],"systems":[109],"attacks,":[112],"revealing":[113],"specific":[114],"vulnerabilities":[115],"exploitation":[117],"points.":[118],"These":[119],"results":[120],"underscore":[121],"urgent":[123],"need":[124,161],"for":[125,162],"enhanced":[126],"frameworks":[128],"address":[130],"layered":[132],"adaptive":[134],"nature":[135],"modern":[137],"tactics.":[139],"work":[141],"gap":[145],"measures":[149],"poses":[151],"solution":[155],"providers:":[156],"there":[157],"is":[158],"pressing":[160],"mitigations":[164],"safeguard":[166],"users":[167],"against":[168],"threats.":[172]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2025-10-10T00:00:00"}