PhishSpy – A Phishing Detection Tool and Defensive Approaches

The art to trick the victim into believing the fake scenarios as legitimate with the intention of getting the target to either download malware or take over personal information. Phishing has become the ultimate fashionable cybercrime among cybercriminals. The impact of phishing is adverse and can lead to unfavorable scenarios, indeed cybercrime. Since these attacks are increasing exponentially and cause huge damage and financial losses, the detection of phishing is of great importance and has also become an area of great interest. In this paper we will discuss a few new tactics for detecting this phishing technique. However, there are already contrasting explanations in many papers, but phishing is very active and in action with new masks that were just discovered in 2022, and for detecting them, there is no algorithm or approach yet. This document describes the most frequent phishing tactics as well as the PhishSpy algorithmic (heuristics-based) tool created to detect phishing, which can discover phishing URLs and provide a suspect score as an output to the user. The PhishSpy algorithmic program features a catch rate of 95%. This paper discusses the methodology used to create this algorithmic program, as well as the implementation details and testing results.