{"id":"https://openalex.org/W4388145412","doi":"https://doi.org/10.1109/tdsc.2023.3329205","title":"Lifting the Grey Curtain: Analyzing the Ecosystem of Android Scam Apps","display_name":"Lifting the Grey Curtain: Analyzing the Ecosystem of Android Scam Apps","publication_year":2023,"publication_date":"2023-11-01","ids":{"openalex":"https://openalex.org/W4388145412","doi":"https://doi.org/10.1109/tdsc.2023.3329205"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3329205","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3329205","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102992154","display_name":"Zhuo Chen","orcid":"https://orcid.org/0000-0002-6829-9868"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuo Chen","raw_affiliation_strings":["Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-6829-9868","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065178474","display_name":"Lei Wu","orcid":"https://orcid.org/0000-0003-1675-5283"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Wu","raw_affiliation_strings":["Department of Computer Science and Technology, Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-1675-5283","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114973765","display_name":"Yubo Hu","orcid":"https://orcid.org/0009-0008-3580-0098"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]},{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Hu","raw_affiliation_strings":["Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0008-3580-0098","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100949528","display_name":"Jing Cheng","orcid":"https://orcid.org/0009-0006-9664-7053"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Cheng","raw_affiliation_strings":["Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0006-9664-7053","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010840746","display_name":"Yufeng Hu","orcid":"https://orcid.org/0009-0009-5132-3284"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]},{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yufeng Hu","raw_affiliation_strings":["Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0009-5132-3284","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088790914","display_name":"Yajin Zhou","orcid":"https://orcid.org/0000-0001-7610-4736"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yajin Zhou","raw_affiliation_strings":["Department of Computer Science and Technology, Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-7610-4736","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Key Laboratory of Blockchain and Cyberspace Governance of Zhejiang Province, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075267073","display_name":"Zhushou Tang","orcid":"https://orcid.org/0009-0004-4121-7799"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhushou Tang","raw_affiliation_strings":["QI-ANXIN Technology Group Inc., Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0004-4121-7799","affiliations":[{"raw_affiliation_string":"QI-ANXIN Technology Group Inc., Shanghai, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012302254","display_name":"Yexuan Chen","orcid":"https://orcid.org/0009-0000-2288-0959"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yexuan Chen","raw_affiliation_strings":["QI-ANXIN Technology Group Inc., Shanghai, China","Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0000-2288-0959","affiliations":[{"raw_affiliation_string":"QI-ANXIN Technology Group Inc., Shanghai, China","institution_ids":[]},{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102839957","display_name":"Jinku Li","orcid":"https://orcid.org/0000-0003-0709-7434"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinku Li","raw_affiliation_strings":["Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China"],"raw_orcid":"https://orcid.org/0000-0003-0709-7434","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Xidian University, Xi&#x2019;an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["Department of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-1969-2591","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8051,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.70473846,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"21","issue":"4","first_page":"3406","last_page":"3421"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6083757281303406},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.46298137307167053},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.40910643339157104},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.34574657678604126}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6083757281303406},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.46298137307167053},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.40910643339157104},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34574657678604126},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3329205","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3329205","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2511910633","display_name":null,"funder_award_id":"62172360","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3848079773","display_name":null,"funder_award_id":"U21A20464","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4154949110","display_name":null,"funder_award_id":"U21A20467","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5918404994","display_name":null,"funder_award_id":"2021FZZX001-26","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Mobile":[0],"applications":[1],"(apps)":[2],"are":[3,111,186,193],"extensively":[4],"involved":[5],"in":[6],"online":[7,200],"scams.":[8],"Previous":[9],"studies":[10],"mainly":[11],"target":[12],"<italic":[13,23,38,49,165,178,183],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[14,24,39,50,71,166,179,184],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">malicious</i>":[15],"apps":[16,68],"that":[17,234],"either":[18],"compromise":[19],"victims'":[20],"devices":[21,60],"(":[22,37],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">e.g.</i>":[25,40,167],",":[26,41,168,181],"malware":[27],"and":[28,35,89,131,136,197,209,218,241,249],"ransomware),":[29],"or":[30,61],"lead":[31],"to":[32,74,83,117,139,152,175,206,245,259],"privacy":[33],"leakage":[34],"abuse":[36],"creepware).":[42],"Recently,":[43],"an":[44],"emerging":[45],"kind":[46],"of":[47,92,156,256],"app":[48,201],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">makes":[51],"profits":[52],"by":[53,129],"providing":[54],"scam":[55],"services":[56],"rather":[57],"than":[58],"compromising":[59],"abusing":[62],"privacy</i>":[63],".":[64],"We":[65,232],"name":[66],"these":[67],"as":[69,195],"<bold":[70],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">scamware</b>":[72],"due":[73],"their":[75,137],"deceptive":[76],"behavior,":[77],"which":[78],"poses":[79],"a":[80],"new":[81],"threat":[82],"(mobile)":[84],"users.":[85],"However,":[86],"the":[87,90,99,125,134,141,148,154,170,182,187,199,211,219,223,239,253,261],"characteristics":[88],"ecosystem":[91,142],"scamware":[93,110,149],"remain":[94],"mysterious.":[95],"This":[96],"paper":[97],"takes":[98],"first":[100,123],"step":[101],"toward":[102],"systematically":[103],"studying":[104],"scamware.":[105,144,157],"In":[106],"total,":[107],"1262":[108],"ground-truth":[109],"collected":[112],"from":[113],"December":[114],"1,":[115,119],"2020,":[116],"May":[118],"2022.":[120],"Specifically,":[121],"we":[122,146,250],"investigate":[124],"social":[126],"tricks":[127],"used":[128],"scamware,":[130,177],"then":[132],"analyze":[133],"participants":[135,192],"relationships":[138],"demystify":[140],"behind":[143],"Finally,":[145],"reveal":[147],"development":[150],"features":[151],"facilitate":[153,207,238],"detection":[155],"Our":[158],"study":[159,221],"also":[160],"gives":[161],"some":[162],"interesting":[163],"findings,":[164],"1)":[169],"crowd-sourcing":[171],"strategy":[172],"is":[173,216,226],"adopted":[174],"develop":[176],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">i.e.</i>":[180],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">scammers</i>":[185],"core":[188],"members,":[189],"while":[190],"other":[191],"hired":[194],"peripherals;":[196],"2)":[198],"generators":[202],"have":[203],"been":[204],"abused":[205],"development;":[208],"3)":[210],"money":[212,224],"mule":[213],"based":[214],"payment":[215],"prevalent,":[217],"case":[220],"shows":[222],"flow":[225],"around":[227],"$":[228],"2593346":[229],"per":[230],"day.":[231],"believe":[233],"our":[235,257],"findings":[236],"will":[237,251],"community":[240],"law":[242],"enforcement":[243],"agencies":[244],"mitigate":[246],"this":[247],"threat,":[248],"release":[252],"source":[254],"code":[255],"tools":[258],"engage":[260],"community.":[262]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}