RRPhish: Anti-phishing via mining brand resources request

Although in recent years a variety of anti-phishing studies have been carried out, phishing fraud has become increasingly rampant. Especially with the popularity of electronic banking and mobile payment, phishing attacks have become more profitable. In this context, exploring efficient and practical anti-phishing technology is particularly necessary and urgent. In this paper, by analyzing the resources (CSS, JS, and image files) request characteristics of phishing sites, we propose a novel anti-phishing method - RRPhish. RRPhish as an enhanced blacklist technology, can detect not only phishes in blacklist, but also emerging phishes. The experiments demonstrate the effectiveness of RRPhish.