PhishAgent: A Robust Multimodal Agent for Phishing Webpage Detection
Authors:
Top Cited Papers
Open Access
- 11 April 2025
- journal article
- Published by Association for the Advancement of Artificial Intelligence (AAAI) in Proceedings of the AAAI Conference on Artificial Intelligence
- Vol. 39 (27) , 27869-27877
Abstract
Phishing attacks are a major threat to online security, exploiting user vulnerabilities to steal sensitive information. Various methods have been developed to counteract phishing, each with varying levels of accuracy, but they also face notable limitations. In this study, we introduce PhishAgent, a multimodal agent that combines a wide range of tools, integrating both online and offline knowledge bases with Multimodal Large Language Models (MLLMs). This combination leads to broader brand coverage, which enhances brand recognition and recall. Furthermore, we propose a multimodal information retrieval framework designed to extract the relevant top k items from offline knowledge bases, using available information from a webpage, including logos and HTML. Our empirical results, based on three real-world datasets, demonstrate that the proposed framework significantly enhances detection accuracy and reduces both false positives and false negatives, while maintaining model efficiency. Additionally, PhishAgent shows strong resilience against various types of adversarial attacks.Keywords
All Related Versions
This publication has 10 references indexed in Scilit:
- UniIR: Training and Benchmarking Universal Multimodal Information Retrievers2024
- Agent-FLAN: Designing Data and Methods of Effective Agent Tuning for Large Language Models2024
- HuggingGPT: Solving AI Tasks with ChatGPT and its Friends in Hugging Face2023
- HinPhish: An Effective Phishing Detection Approach Based on Heterogeneous Information NetworksApplied Sciences, 2021
- Jail-Phish: An improved search engine based phishing detection systemComputers & Security, 2019
- A stacking model using URL and HTML features for phishing webpage detectionFuture Generation Computer Systems, 2019
- Two-level authentication approach to protect from phishing attacks in real timeJournal of Ambient Intelligence and Humanized Computing, 2017
- A phish detector using lightweight search featuresComputers & Security, 2016
- Utilisation of website logo for phishing detectionComputers & Security, 2015
- Detecting Phishing Web Pages with Visual Similarity Assessment Based on Earth Mover's Distance (EMD)IEEE Transactions on Dependable and Secure Computing, 2006