{"id":"https://openalex.org/W4200194343","doi":"https://doi.org/10.1145/3485832.3488012","title":"Detecting and Characterizing SMS Spearphishing Attacks","display_name":"Detecting and Characterizing SMS Spearphishing Attacks","publication_year":2021,"publication_date":"2021-12-06","ids":{"openalex":"https://openalex.org/W4200194343","doi":"https://doi.org/10.1145/3485832.3488012"},"language":"en","primary_location":{"id":"doi:10.1145/3485832.3488012","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3488012","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101513317","display_name":"Mingxuan Liu","orcid":"https://orcid.org/0009-0005-9456-015X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingxuan Liu","raw_affiliation_strings":["Tsinghua University, China and Beijing National Research Center for Information Science and Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China and Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100395383","display_name":"Yiming Zhang","orcid":"https://orcid.org/0000-0002-9902-4664"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiming Zhang","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101694986","display_name":"Baojun Liu","orcid":"https://orcid.org/0000-0002-9032-8063"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Baojun Liu","raw_affiliation_strings":["Tsinghua University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100452308","display_name":"Zhou Li","orcid":"https://orcid.org/0000-0002-9401-1012"},"institutions":[{"id":"https://openalex.org/I204250578","display_name":"University of California, Irvine","ror":"https://ror.org/04gyf1771","country_code":"US","type":"education","lineage":["https://openalex.org/I204250578"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhou Li","raw_affiliation_strings":["University of California, Irvine, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of California, Irvine, USA","institution_ids":["https://openalex.org/I204250578"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067799841","display_name":"Haixin Duan","orcid":"https://orcid.org/0000-0003-0083-733X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haixin Duan","raw_affiliation_strings":["Tsinghua University, China and QI-ANXIN Technology Research Institute, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China and QI-ANXIN Technology Research Institute, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100885674","display_name":"Donghong Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Donghong Sun","raw_affiliation_strings":["Tsinghua University, China and Beijing National Research Center for Information Science and Technology, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University, China and Beijing National Research Center for Information Science and Technology, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.5588,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":{"value":0.95925581,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"930","last_page":"943"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7035747170448303},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.695676326751709},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6788612604141235},{"id":"https://openalex.org/keywords/short-message-service","display_name":"Short Message Service","score":0.562965989112854},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.49303528666496277},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.47208425402641296},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4406335651874542},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.10960611701011658}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7035747170448303},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.695676326751709},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6788612604141235},{"id":"https://openalex.org/C74558129","wikidata":"https://www.wikidata.org/wiki/Q43024","display_name":"Short Message Service","level":2,"score":0.562965989112854},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.49303528666496277},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.47208425402641296},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4406335651874542},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.10960611701011658},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3485832.3488012","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3488012","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7400000095367432}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1593211785","https://openalex.org/W1971573592","https://openalex.org/W1984457329","https://openalex.org/W1984762104","https://openalex.org/W1990188874","https://openalex.org/W1995258314","https://openalex.org/W2000369940","https://openalex.org/W2036166268","https://openalex.org/W2053626416","https://openalex.org/W2053774863","https://openalex.org/W2062614982","https://openalex.org/W2074379603","https://openalex.org/W2118226475","https://openalex.org/W2139565456","https://openalex.org/W2165267130","https://openalex.org/W2292723020","https://openalex.org/W2405294821","https://openalex.org/W2470929368","https://openalex.org/W2508482518","https://openalex.org/W2514696089","https://openalex.org/W2541895721","https://openalex.org/W2614012654","https://openalex.org/W2652594876","https://openalex.org/W2741271950","https://openalex.org/W2909682623","https://openalex.org/W2914868668","https://openalex.org/W2962904552","https://openalex.org/W2990296034","https://openalex.org/W3035000127","https://openalex.org/W3095325295","https://openalex.org/W3100545544","https://openalex.org/W4205393804"],"related_works":["https://openalex.org/W4285132775","https://openalex.org/W4294658053","https://openalex.org/W3167347940","https://openalex.org/W4285172160","https://openalex.org/W3192107850","https://openalex.org/W2976051608","https://openalex.org/W2984000590","https://openalex.org/W308359497","https://openalex.org/W2766781562","https://openalex.org/W1489373009"],"abstract_inverted_index":{"Although":[0],"spearphishing":[1,37,76,107,132,142,168,204],"is":[2,13,173,206],"a":[3,32,43,81,99,115,144,152,192],"well-known":[4],"security":[5,83,220],"issue":[6],"and":[7,97,104,126,151,170,182],"has":[8,28,41,51,143],"been":[9,29,158],"widely":[10],"researched,":[11],"it":[12],"still":[14],"an":[15],"evolving":[16],"threat":[17],"with":[18,80],"emerging":[19,73,219],"forms.":[20],"In":[21,61],"recent":[22],"years,":[23],"Short":[24],"Message":[25],"Service":[26],"(SMS)":[27],"revealed":[30],"as":[31],"new":[33],"distribution":[34,162],"channel":[35],"for":[36],"messages,":[38],"which":[39],"already":[40],"caused":[42],"serious":[44],"impact":[45,147,201],"in":[46],"the":[47,58,66,110,121,128,149,161,177,184,200],"real":[48],"world,":[49],"but":[50],"not":[52],"yet":[53],"attracted":[54],"enough":[55],"attention":[56],"from":[57],"academic":[59],"community.":[60],"this":[62,72,218],"paper,":[63],"we":[64,85],"report":[65],"first":[67],"systemic":[68],"study":[69],"to":[70,124,179,213,216],"spotlight":[71],"threat,":[74],"SMS":[75,131,141,203],"attack.":[77,133],"Through":[78],"cooperating":[79],"leading":[82],"vendor,":[84],"obtain":[86],"31.96M":[87],"real-world":[88],"spam":[89,172],"messages":[90,108,123],"that":[91,140],"span":[92],"three":[93],"months.":[94],"We":[95,138,208],"design":[96],"implement":[98],"novel":[100],"NLP-based":[101],"detection":[102,181],"algorithm,":[103],"uncover":[105],"90,801":[106],"on":[109,120,148,210],"entire":[111],"dataset.":[112],"And":[113,160],"then,":[114],"large-scale":[116],"measurement":[117],"was":[118],"performed":[119],"detected":[122],"reveal":[125],"understand":[127],"characteristics":[129],"of":[130,155,163,186,194,202],"Our":[134,197],"findings":[135],"are":[136],"multi-fold.":[137],"discover":[139],"significant":[145],"negative":[146],"real-world,":[150],"large":[153],"number":[154],"victims":[156],"have":[157,190],"affected.":[159],"active":[164],"illicit":[165],"types":[166],"between":[167],"message":[169],"common":[171],"quite":[174],"inconsistent.":[175],"At":[176],"micro-level,":[178],"evade":[180],"increase":[183],"probability":[185],"success,":[187],"adversary":[188],"campaigns":[189],"evolved":[191],"set":[193],"sophisticated":[195],"strategies.":[196],"research":[198],"highlights":[199],"attack":[205],"prominent.":[207],"call":[209],"different":[211],"communities":[212],"work":[214],"together":[215],"mitigate":[217],"threat.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}