Title
LogoMotive: Detecting Logos on Websites to Identify Online Scams - A TLD Case Study
Author
van den Hout, Thijs (SIDN Labs)
Wabeke, Thymen (SIDN Labs)
Moura, Giovane C. M. (TU Delft Cyber Security; SIDN Labs)
Hesselman, Cristian (SIDN Labs; University of Twente)
Contributor
Hohlfeld, Oliver (editor)
Moura, Giovane (editor)
Pelsser, Cristel (editor)
Date
2022
Abstract
Logos give a website a familiar feel and promote trust. Scammers take advantage of that by using well-known organizations’ logos on malicious websites. Unsuspecting Internet users see these logos and think they are looking at a government website or legitimate webshop, when it is a phishing site, a counterfeit webshop, or a site set up to spread misinformation. We present the largest logo detection study on websites to date. We analyze 6.2M domain names from the Netherlands ’ country-code top-level domain.nl, in two case studies to detect logo misuse for two organizations: the Dutch national government and Thuiswinkel Waarborg, an organization that issues certified webshop trust marks. We show how we can detect phishing, spear phishing, dormant phishing attacks, and brand misuse. To that end, we developed LogoMotive, an application that crawls domain names, generates screenshots, and detects logos using supervised machine learning. LogoMotive is operational in the.nl registry, and it is generalizable to detect any other logo in any DNS zone to help identify abuse.
To reference this document use:
http://resolver.tudelft.nl/uuid:903222c7-ff80-4857-b910-15e65de09ab1
DOI
https://doi.org/10.1007/978-3-030-98785-5_1
Publisher
Springer
Embargo date
2023-07-01
ISBN
9783030987848
Source
Passive and Active Measurement - 23rd International Conference, PAM 2022, Proceedings
Event
23rd International Conference on Passive and Active Measurement, PAM 2022, 2022-03-28 → 2022-03-30, Virtual, Online
Series
Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 0302-9743, 13210 LNCS
Bibliographical note
Green Open Access added to TU Delft Institutional Repository 'You share, we take care!' - Taverne project https://www.openaccess.nl/en/you-share-we-take-care Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.
Part of collection
Institutional Repository
Document type
conference paper
Rights
© 2022 Thijs van den Hout, Thymen Wabeke, Giovane C. M. Moura, Cristian Hesselman