Phishing Kit Detection via Database Search Automation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Phishing kits are easily accessible and deployable on the internet, making it simple for amateur criminals to set up phishing websites, and existing methods lack effective mechanisms for their detection and removal.
Innovation Solution
A system and method utilizing a processor and memory to locate phishing kits on file hosting websites by storing file names and host names in a database, searching these using a simulated human-like interaction with search engines, and periodically updating the database to facilitate their removal.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If phishing kits are made freely accessible on file hosting websites, then ease of deployment for criminals is improved, but detection and removal capability deteriorates
Solution Approach 1:
The system performs preliminary actions by proactively searching for phishing kits on file hosting websites before they are deployed for criminal use. The database stores file names and host names, and the system periodically searches for these kits, allowing for early detection and removal before they can be widely distributed or used in phishing attacks.
Solution Approach 2:
The system implements feedback mechanisms by monitoring the internet for the presence of phishing kits, storing findings in a database, and periodically updating the search results. This feedback loop allows the system to track the availability of phishing kits over time and provide ongoing detection capability, enabling file hosting proprietors to be contacted and kits to be removed.
2Speed
If automated search systems are used to locate phishing kits, then detection speed is improved, but system complexity increases
Solution Approach 1:
The system performs self-service by automatically searching for phishing kits using stored file names and host names without requiring manual intervention. The processor executes search queries against search engines, automatically retrieves results, and updates the database, enabling rapid detection while keeping the operational complexity manageable through automation.
Solution Approach 2:
The system uses copying by creating a database copy of file names and host names that can be searched repeatedly. This allows the same search criteria to be applied multiple times against different search engines and websites, improving detection speed through reuse of stored information without requiring complex real-time analysis each time.
3Measurement precision
If human-like search patterns are simulated, then detection accuracy is improved, but search time increases
Solution Approach 1:
The system applies partial action by implementing human-like search patterns selectively - using random typing speeds and pauses only when necessary to emulate human behavior and avoid detection. This allows the system to maintain detection accuracy when needed while reducing search time when rapid automated searching is sufficient, balancing precision and speed.
Data Source
AI summary
A system and method for locating phishing kits on the internet is disclosed herein. The system is configured to perform a method comprising storing phishing kit file names and file host names into a database, navigating to a search engine, searching the file hosts stored in the database for the phishing kit file names stored in the database, saving URLs where the phishing kit file names are located on the internet into the database, and displaying URLs where the phishing kit file names are located as results.