{"id":"https://openalex.org/W4311080346","doi":"https://doi.org/10.1145/3570603","title":"Characterizing Cryptocurrency-themed Malicious Browser Extensions","display_name":"Characterizing Cryptocurrency-themed Malicious Browser Extensions","publication_year":2022,"publication_date":"2022-12-01","ids":{"openalex":"https://openalex.org/W4311080346","doi":"https://doi.org/10.1145/3570603"},"language":"en","primary_location":{"id":"doi:10.1145/3570603","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570603","pdf_url":null,"source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1145/3570603","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000432413","display_name":"Kailong Wang","orcid":"https://orcid.org/0000-0002-3977-6573"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Kailong Wang","raw_affiliation_strings":["Huazhong University of Science and Technology & National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-3977-6573","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology & National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059706276","display_name":"Yuxi Ling","orcid":"https://orcid.org/0000-0003-0887-7563"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yuxi Ling","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-0887-7563","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100449630","display_name":"Yanjun Zhang","orcid":"https://orcid.org/0000-0001-5611-3483"},"institutions":[{"id":"https://openalex.org/I149704539","display_name":"Deakin University","ror":"https://ror.org/02czsnj07","country_code":"AU","type":"education","lineage":["https://openalex.org/I149704539"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yanjun Zhang","raw_affiliation_strings":["Deakin University, Geelong, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-5611-3483","affiliations":[{"raw_affiliation_string":"Deakin University, Geelong, VIC, Australia","institution_ids":["https://openalex.org/I149704539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027701354","display_name":"Zhou Yu","orcid":"https://orcid.org/0000-0001-5663-9178"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou Yu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5663-9178","affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5115695530","display_name":"Haoyu Wang","orcid":"https://orcid.org/0000-0003-1100-8633"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haoyu Wang","raw_affiliation_strings":["Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1100-8633","affiliations":[{"raw_affiliation_string":"Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015858067","display_name":"Guangdong Bai","orcid":"https://orcid.org/0000-0002-6390-9890"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Guangdong Bai","raw_affiliation_strings":["University of Queensland, Brisbane, QLD, Australia"],"raw_orcid":"https://orcid.org/0000-0002-6390-9890","affiliations":[{"raw_affiliation_string":"University of Queensland, Brisbane, QLD, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024892041","display_name":"Beng Chin Ooi","orcid":"https://orcid.org/0000-0003-4446-1100"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Beng Chin Ooi","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-4446-1100","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085067496","display_name":"Jin Song Dong","orcid":"https://orcid.org/0000-0002-6512-8326"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jin Song Dong","raw_affiliation_strings":["National University of Singapore, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6512-8326","affiliations":[{"raw_affiliation_string":"National University of Singapore, Singapore, Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5000432413"],"corresponding_institution_ids":["https://openalex.org/I165932596"],"apc_list":null,"apc_paid":null,"fwci":1.9315,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.86132666,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"6","issue":"3","first_page":"1","last_page":"31"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cryptocurrency","display_name":"Cryptocurrency","score":0.9364887475967407},{"id":"https://openalex.org/keywords/vetting","display_name":"Vetting","score":0.7850878238677979},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.7242377996444702},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.68770432472229},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6178306341171265},{"id":"https://openalex.org/keywords/status-quo","display_name":"Status quo","score":0.6104364395141602},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6025753021240234},{"id":"https://openalex.org/keywords/extension","display_name":"Extension (predicate logic)","score":0.47937777638435364},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.41655233502388},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.35114026069641113},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.09528371691703796},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08635377883911133}],"concepts":[{"id":"https://openalex.org/C180706569","wikidata":"https://www.wikidata.org/wiki/Q13479982","display_name":"Cryptocurrency","level":2,"score":0.9364887475967407},{"id":"https://openalex.org/C2777230681","wikidata":"https://www.wikidata.org/wiki/Q7923820","display_name":"Vetting","level":2,"score":0.7850878238677979},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.7242377996444702},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.68770432472229},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6178306341171265},{"id":"https://openalex.org/C2776748549","wikidata":"https://www.wikidata.org/wiki/Q201610","display_name":"Status quo","level":2,"score":0.6104364395141602},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6025753021240234},{"id":"https://openalex.org/C2778029271","wikidata":"https://www.wikidata.org/wiki/Q5421931","display_name":"Extension (predicate logic)","level":2,"score":0.47937777638435364},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.41655233502388},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.35114026069641113},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.09528371691703796},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08635377883911133},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/3570603","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570603","pdf_url":null,"source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},{"id":"pmh:oai:figshare.com:article/22091747","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Characterizing_Cryptocurrency-themed_Malicious_Browser_Extensions/22091747","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:figshare.com:article/23722152","is_oa":true,"landing_page_url":"https://figshare.com/articles/journal_contribution/Characterizing_Cryptocurrency-themed_Malicious_Browser_Extensions/23722152","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:figshare.com:article/23734293","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/Characterizing_Cryptocurrency-Themed_Malicious_Browser_Extensions/23734293","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Text"},{"id":"pmh:oai:research-repository.griffith.edu.au:10072/421378","is_oa":true,"landing_page_url":"http://hdl.handle.net/10072/421378","pdf_url":null,"source":{"id":"https://openalex.org/S4306402548","display_name":"Griffith Research Online (Griffith University, Queensland, Australia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11701301","host_organization_name":"Griffith University","host_organization_lineage":["https://openalex.org/I11701301"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Journal article"}],"best_oa_location":{"id":"doi:10.1145/3570603","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3570603","pdf_url":null,"source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/12","score":0.4699999988079071,"display_name":"Responsible consumption and production"}],"awards":[{"id":"https://openalex.org/G1126939530","display_name":null,"funder_award_id":"NSRSG grant 4018264-617225","funder_id":"https://openalex.org/F4320320984","funder_display_name":"University of Queensland"},{"id":"https://openalex.org/G1175795771","display_name":null,"funder_award_id":"4018264-617225","funder_id":"https://openalex.org/F4320320984","funder_display_name":"University of Queensland"},{"id":"https://openalex.org/G7659621868","display_name":null,"funder_award_id":"62072046","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320320984","display_name":"University of Queensland","ror":"https://ror.org/00rqy9422"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322724","display_name":"Ministry of Education, India","ror":"https://ror.org/048xjjh50"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1527892","https://openalex.org/W1438425488","https://openalex.org/W1480813933","https://openalex.org/W1982042804","https://openalex.org/W2069054745","https://openalex.org/W2169771430","https://openalex.org/W2258082031","https://openalex.org/W2604844934","https://openalex.org/W2617428178","https://openalex.org/W2789063661","https://openalex.org/W2912514591","https://openalex.org/W2964194794","https://openalex.org/W2990806707","https://openalex.org/W3002277530","https://openalex.org/W3004042723","https://openalex.org/W3017072639","https://openalex.org/W3047055682","https://openalex.org/W3110204761","https://openalex.org/W3129830838","https://openalex.org/W3155511142","https://openalex.org/W3184208314","https://openalex.org/W3213511415","https://openalex.org/W4200529292","https://openalex.org/W4313563535","https://openalex.org/W6603835122"],"related_works":["https://openalex.org/W3137893487","https://openalex.org/W2588786532","https://openalex.org/W2169930420","https://openalex.org/W2108865840","https://openalex.org/W3129671051","https://openalex.org/W2802914690","https://openalex.org/W4248793399","https://openalex.org/W3120410482","https://openalex.org/W2980021769","https://openalex.org/W2769878339"],"abstract_inverted_index":{"Due":[0],"to":[1,22,48,93,114,137,191,197,201],"the":[2,49,62,67,89,163,167,217],"surging":[3],"popularity":[4],"of":[5,14,38,60,66,73,75,79,166,216],"various":[6,146],"cryptocurrencies":[7],"in":[8,81,209],"recent":[9],"years,":[10],"a":[11,35,71,126,189],"large":[12],"number":[13],"browser":[15],"extensions":[16,42,134,144,170,220],"have":[17,56,118,130],"been":[18],"developed":[19],"as":[20,27,188],"portals":[21],"access":[23],"relevant":[24],"services,":[25],"such":[26],"cryptocurrency":[28,39],"exchanges":[29],"and":[30,51,95,104,117,157,171,175,194,221],"wallets.":[31],"This":[32],"has":[33],"stimulated":[34],"wild":[36],"growth":[37],"themed":[40],"malicious":[41,98,133,169,219],"that":[43,135],"cause":[44],"heavy":[45],"financial":[46],"losses":[47],"users":[50],"legitimate":[52],"service":[53],"providers.":[54],"They":[55],"shown":[57],"their":[58,149,173],"capability":[59],"evading":[61],"stringent":[63],"vetting":[64],"processes":[65],"extension":[68,106,192,198],"stores,":[69],"highlighting":[70],"lack":[72],"understanding":[74],"this":[76,85,210],"emerging":[77],"type":[78],"malware":[80],"our":[82,214,223],"community.":[83],"In":[84],"work,":[86],"we":[87,129,212],"conduct":[88],"first":[90],"systematic":[91],"study":[92],"identify":[94],"characterize":[96,142],"cryptocurrency-themed":[97,123,168],"extensions.":[99,124],"We":[100,140],"monitor":[101],"seven":[102],"official":[103],"third-party":[105],"distribution":[107,150],"venues":[108],"for":[109],"18":[110],"months":[111],"(December":[112],"2020":[113],"June":[115],"2022)":[116],"collected":[119],"around":[120],"3600":[121],"unique":[122],"Leveraging":[125],"hybrid":[127],"analysis,":[128],"identified":[131,218],"186":[132],"belong":[136],"five":[138],"categories.":[139],"then":[141],"those":[143],"from":[145],"perspectives":[147],"including":[148],"channels,":[151],"life":[152],"cycles,":[153],"developers,":[154],"illicit":[155],"behaviors,":[156],"illegal":[158],"gains.":[159],"Our":[160,185],"work":[161,186],"unveils":[162],"status":[164],"quo":[165],"reveals":[172],"disguises":[174],"programmatic":[176],"features":[177],"on":[178],"which":[179],"detection":[180],"techniques":[181],"can":[182],"be":[183],"based.":[184],"serves":[187],"warning":[190],"users,":[193],"an":[195],"appeal":[196],"store":[199],"operators":[200],"enact":[202],"dedicated":[203],"countermeasures.":[204],"To":[205],"facilitate":[206],"future":[207],"research":[208],"area,":[211],"release":[213],"dataset":[215],"open-source":[222],"analyzer.":[224]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}