{"id":"https://openalex.org/W4415036623","doi":"https://doi.org/10.1145/3805707","title":"Malware-Facilitated E-Commerce Fraud: A Link Analysis of Black-Hat SEO-Based E-Commerce Fraud Actor Groups Targeting Japan","display_name":"Malware-Facilitated E-Commerce Fraud: A Link Analysis of Black-Hat SEO-Based E-Commerce Fraud Actor Groups Targeting Japan","publication_year":2026,"publication_date":"2026-03-27","ids":{"openalex":"https://openalex.org/W4415036623","doi":"https://doi.org/10.1145/3805707"},"language":"en","primary_location":{"id":"doi:10.1145/3805707","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805707","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3805707","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109801839","display_name":"Makoto Shimamura","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153322","display_name":"Trend Micro (Japan)","ror":"https://ror.org/043a53k35","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210153322"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Makoto Shimamura","raw_affiliation_strings":["Trend Micro Incorporated, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0009-0003-8447-3648","affiliations":[{"raw_affiliation_string":"Trend Micro Incorporated, Tokyo, Japan","institution_ids":["https://openalex.org/I4210153322"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003344340","display_name":"Shingo Matsugaya","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153322","display_name":"Trend Micro (Japan)","ror":"https://ror.org/043a53k35","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210153322"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shingo Matsugaya","raw_affiliation_strings":["Trend Micro Incorporated, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0009-0007-1258-185X","affiliations":[{"raw_affiliation_string":"Trend Micro Incorporated, Tokyo, Japan","institution_ids":["https://openalex.org/I4210153322"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110396842","display_name":"Keisuke Sakai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210086438","display_name":"Kanagawa Prefectural Police Department","ror":"https://ror.org/0005ck383","country_code":"JP","type":"government","lineage":["https://openalex.org/I4210086438"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Keisuke Sakai","raw_affiliation_strings":["Kanagawa Prefectural Police Headquarters, Yokohama, Japan"],"raw_orcid":"https://orcid.org/0009-0009-0599-6576","affiliations":[{"raw_affiliation_string":"Kanagawa Prefectural Police Headquarters, Yokohama, Japan","institution_ids":["https://openalex.org/I4210086438"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071983399","display_name":"Kosuke Takeshige","orcid":null},"institutions":[{"id":"https://openalex.org/I4210092458","display_name":"Chiba Prefectural Police","ror":"https://ror.org/00hgd2m44","country_code":"JP","type":"government","lineage":["https://openalex.org/I4210092458"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kosuke Takeshige","raw_affiliation_strings":["Chiba Prefectural Police Headquarters, Chiba, Japan"],"raw_orcid":"https://orcid.org/0009-0007-1077-5271","affiliations":[{"raw_affiliation_string":"Chiba Prefectural Police Headquarters, Chiba, Japan","institution_ids":["https://openalex.org/I4210092458"]}]},{"author_position":"last","author":{"id":null,"display_name":"Masaki Hashimoto","orcid":"https://orcid.org/0000-0001-5596-282X"},"institutions":[{"id":"https://openalex.org/I201933988","display_name":"Kagawa University","ror":"https://ror.org/04j7mzp05","country_code":"JP","type":"education","lineage":["https://openalex.org/I201933988"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masaki Hashimoto","raw_affiliation_strings":["Faculty of Engineering and Design, Kagawa University, Takamatsu, Japan"],"raw_orcid":"https://orcid.org/0000-0001-5596-282X","affiliations":[{"raw_affiliation_string":"Faculty of Engineering and Design, Kagawa University, Takamatsu, Japan","institution_ids":["https://openalex.org/I201933988"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.00265044,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":"2","first_page":"1","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11838","display_name":"Crime, Illicit Activities, and Governance","score":0.9574999809265137,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cybercrime","display_name":"Cybercrime","score":0.8751000165939331},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6686000227928162},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5971999764442444},{"id":"https://openalex.org/keywords/period","display_name":"Period (music)","score":0.4489000141620636},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.38600000739097595},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.3619999885559082}],"concepts":[{"id":"https://openalex.org/C2779390178","wikidata":"https://www.wikidata.org/wiki/Q29137","display_name":"Cybercrime","level":3,"score":0.8751000165939331},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6686000227928162},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.6380000114440918},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5971999764442444},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48010000586509705},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46239998936653137},{"id":"https://openalex.org/C2781291010","wikidata":"https://www.wikidata.org/wiki/Q178580","display_name":"Period (music)","level":2,"score":0.4489000141620636},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.42410001158714294},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.40299999713897705},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.38600000739097595},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.3619999885559082},{"id":"https://openalex.org/C2779756789","wikidata":"https://www.wikidata.org/wiki/Q28549308","display_name":"Fake news","level":2,"score":0.34049999713897705},{"id":"https://openalex.org/C56995899","wikidata":"https://www.wikidata.org/wiki/Q1126687","display_name":"Focus group","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.27619999647140503},{"id":"https://openalex.org/C3019036681","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"Internet users","level":3,"score":0.26739999651908875},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.25060001015663147}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3805707","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805707","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2505.21021","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2505.21021","pdf_url":"https://arxiv.org/pdf/2505.21021","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2505.21021","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2505.21021","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3805707","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3805707","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2276488401","https://openalex.org/W2114996745","https://openalex.org/W4398183551","https://openalex.org/W3203348211","https://openalex.org/W4389279178","https://openalex.org/W4391559759","https://openalex.org/W4394994373","https://openalex.org/W2054093027","https://openalex.org/W4324157308","https://openalex.org/W4404847817","https://openalex.org/W2900633536","https://openalex.org/W3134731862","https://openalex.org/W4384822835","https://openalex.org/W4220721362"],"related_works":[],"abstract_inverted_index":{"The":[0],"financial":[1],"impact":[2],"of":[3,63,128,154],"fraudulent":[4,56],"e-commerce":[5,57,104],"schemes":[6],"has":[7],"been":[8],"increasing":[9,60],"steadily.":[10],"Several":[11],"research":[12],"reports":[13],"demonstrate":[14],"that":[15],"some":[16],"threat":[17,70],"actors":[18,71],"compromise":[19],"legitimate":[20],"web":[21],"sites":[22,105],"and":[23,59,72,91,139],"deploy":[24],"malware":[25,33,79,99,137,156],"for":[26],"black-hat":[27],"Search":[28],"Engine":[29],"Optimization":[30],"(SEO).":[31],"This":[32,65,145],"facilitates":[34],"SEO":[35],"poisoning,":[36],"causing":[37],"search":[38],"engines":[39],"to":[40,55],"display":[41],"deceptive":[42],"lure":[43],"pages":[44],"as":[45],"if":[46],"hosted":[47],"on":[48,68,88],"the":[49,61,126,152],"compromised":[50],"sites,":[51],"effectively":[52],"redirecting":[53],"users":[54],"platforms":[58],"risk":[62],"victimization.":[64],"study":[66],"focuses":[67],"these":[69,83,108,113,155],"their":[73],"tactics.":[74],"To":[75],"investigate":[76],"relationships":[77],"between":[78],"families":[80],"employed":[81],"by":[82],"groups,":[84],"we":[85],"collected":[86],"data":[87,114],"2,852":[89],"command":[90],"control":[92],"(C2)":[93],"servers":[94],"associated":[95],"with":[96],"10":[97],"distinct":[98,130],"families,":[100],"alongside":[101],"697,816":[102],"fake":[103],"identified":[106],"through":[107],"servers.":[109],"We":[110],"subsequently":[111],"analyzed":[112],"using":[115],"Maltego,":[116],"a":[117,134],"widely":[118],"recognized":[119],"link":[120],"analysis":[121,146],"tool.":[122],"Our":[123],"results":[124],"suggest":[125],"presence":[127],"four":[129],"groups":[131,141],"each":[132],"utilizing":[133],"single,":[135],"unique":[136],"family,":[138],"two":[140],"operating":[142],"multiple":[143],"families.":[144,157],"also":[147],"provides":[148],"valuable":[149],"insights":[150],"into":[151],"characteristics":[153]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}