{"id":"https://openalex.org/W7160137646","doi":"https://doi.org/10.48550/arxiv.2605.00183","title":"I can't recognize (yet): Delayed Rendering to Defeat Visual Phishing Detectors","display_name":"I can't recognize (yet): Delayed Rendering to Defeat Visual Phishing Detectors","publication_year":2026,"publication_date":"2026-04-30","ids":{"openalex":"https://openalex.org/W7160137646","doi":"https://doi.org/10.48550/arxiv.2605.00183"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.00183","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00183","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.00183","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135194271","display_name":"Ying Yuan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuan, Ying","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135209287","display_name":"Cristiano Alex Rado","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rado, Cristiano Alex","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084036967","display_name":"Giovanni Apruzzese","orcid":"https://orcid.org/0000-0002-6890-9611"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Apruzzese, Giovanni","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135224515","display_name":"Mauro Conti","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Conti, Mauro","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5046905749","display_name":"Luigi V. Mancini","orcid":"https://orcid.org/0000-0003-4859-2191"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mancini, Luigi Vincenzo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9265999794006348,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9265999794006348,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.024800000712275505,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.008799999952316284,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.7717999815940857},{"id":"https://openalex.org/keywords/web-page","display_name":"Web page","score":0.7211999893188477},{"id":"https://openalex.org/keywords/rendering","display_name":"Rendering (computer graphics)","score":0.630299985408783},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.46869999170303345},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.33719998598098755},{"id":"https://openalex.org/keywords/plug-in","display_name":"Plug-in","score":0.3116999864578247}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.7717999815940857},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.7211999893188477},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7092000246047974},{"id":"https://openalex.org/C205711294","wikidata":"https://www.wikidata.org/wiki/Q176953","display_name":"Rendering (computer graphics)","level":2,"score":0.630299985408783},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47440001368522644},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.46869999170303345},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.33719998598098755},{"id":"https://openalex.org/C4924752","wikidata":"https://www.wikidata.org/wiki/Q184148","display_name":"Plug-in","level":2,"score":0.3116999864578247},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30309998989105225},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C197129107","wikidata":"https://www.wikidata.org/wiki/Q1921621","display_name":"Merge (version control)","level":2,"score":0.2858999967575073},{"id":"https://openalex.org/C2777548347","wikidata":"https://www.wikidata.org/wiki/Q5456937","display_name":"Flagging","level":2,"score":0.2791999876499176},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.27250000834465027},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.27000001072883606},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.2651999890804291}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.00183","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00183","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.00183","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.00183","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6454030275344849,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Phishing":[0],"webpages":[1],"are":[2,246],"continuously":[3],"polluting":[4],"the":[5,14,37,76,83,108,120,130,148,152,159,166,176,185,189,194,233],"Web.":[6],"Plenty":[7],"of":[8,40,46,55,79,111,122,147,161,235],"countermeasures":[9],"have":[10,66,92,274],"been":[11,68,94,179],"proposed":[12],"and":[13,62,137,241],"most":[15],"advanced":[16],"techniques":[17,220],"leverage":[18],"machine-learning":[19],"methods":[20],"that":[21,88,169,202,243,271],"infer":[22],"whether":[23],"a":[24,53,134,138,145,229,259,277],"webpage":[25,123,136,150],"is":[26],"benign":[27],"or":[28],"not":[29,93],"by":[30,49,97,118,216],"inspecting":[31],"its":[32],"visual":[33,101,131],"representation.":[34],"Yet,":[35],"despite":[36],"demonstrated":[38],"effectiveness":[39,234],"such":[41,164,221],"detection":[42],"methods,":[43],"this":[44],"class":[45],"defenses":[47,81],"is,":[48],"design,":[50],"susceptible":[51],"to":[52,191,214,248,266],"kind":[54],"subtle-but-cheap":[56],"timing-based":[57,89],"attacks":[58,91,237],"which":[59],"--":[60,65],"worryingly,":[61],"perhaps":[63],"surprisingly":[64],"never":[67],"investigated":[69],"so":[70,168],"far.":[71],"Such":[72],"an":[73],"oversight":[74],"questions":[75],"overall":[77],"reliability":[78],"these":[80,112,126,170,236],"in":[82],"wild.":[84],"First,":[85],"we":[86,106,255],"show":[87,201],"evasion":[90],"accounted":[95],"for":[96],"prior":[98],"work":[99],"on":[100,276],"phishing":[102,195,278],"websites":[103],"detectors.":[104],"Then,":[105],"elucidate":[107],"intrinsic":[109],"vulnerability":[110],"detectors:":[113],"they":[114,272],"can":[115,156,205],"be":[116,206],"bypassed":[117],"delaying":[119],"rendering":[121,160],"elements.":[124],"Practically,":[125],"detectors":[127,204],"must":[128],"compute":[129],"similarity":[132,153],"between":[133],"target":[135,149],"known":[139],"legitimate":[140],"one.":[141],"This":[142,181],"requires":[143],"taking":[144],"\"snapshot\"":[146],"before":[151],"computation.":[154],"Attackers":[155],"deliberately":[157],"delay":[158],"key":[162],"elements,":[163],"as":[165,197,222],"logo,":[167],"elements":[171],"appear":[172],"fully":[173],"only":[174],"after":[175],"snapshot":[177],"has":[178],"taken.":[180],"simple":[182],"tactic":[183],"misleads":[184],"visual-similarity":[186],"module,":[187],"leading":[188],"system":[190],"incorrectly":[192],"classify":[193],"page":[196],"benign.":[198],"We":[199,225],"empirically":[200],"state-of-the-art":[203],"completely":[207],"defeated":[208],"(detection":[209],"rate":[210],"dropping":[211],"from":[212],"100%":[213],"0%)":[215],"employing":[217],"easy-to-apply":[218],"problem-space":[219],"curtain":[223],"effects.":[224],"also":[226],"carry":[227],"out":[228],"user":[230],"study,":[231],"evaluating":[232],"against":[238],"real":[239],"humans,":[240],"find":[242],"end":[244],"users":[245,270],"unable":[247],"reliably":[249],"identify":[250],"our":[251],"\"perturbations\"":[252],"(p<.05).":[253],"Finally,":[254],"propose":[256],"mitigations,":[257],"including":[258],"browser-extension":[260],"that,":[261],"without":[262],"making":[263],"any":[264],"call":[265],"remote":[267],"services,":[268],"warns":[269],"may":[273],"landed":[275],"webpage.":[279]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-05T00:00:00"}