Phishing site analysis and blocking service using generative AI

Severity of Phishing and Smishing Damages

Phishing and Smishing Have Become the Biggest Threats to Cybersecurity

Phishing and Smishing Are Causing Serious Societal Losses

[Phishing · Smishing Attack Methods]

Phishing

  • Impersonating financial institutions, etc.
  • Fake Internet Addresses
  • Personal information theft
  • Criminal account transfers

Smishing

  • Sending a link to a fake Internet address
  • Installing malware on connection
  • Stolen personal/financial information

[The Scale of Phishing · Smishing Damage]

Scale of phishing damage

(2018~2022)

Number of damages

  • 227126
  • cases

Damage amount

  • USD
  • 1
  • .
  • 26
  • mil

Scale of smishing damage

(2019~2021)

Number of damages

  • 17841
  • cases

Damage amount

  • USD
  • 13
  • .
  • 3
  • mil

Limitations of Traditional Response and Prevention

[Phishing · Smishing Features]

Short Life Cycle

About 84% of phishing sites exist for less than 24 hours

Various Forms ①

URL Shortening Service

  • bit.ly/xxxx

  • tinyurl.com/xxxx

Open Redirect Vulnerability

  • htpp://www.naver.com/newsite/home/link.php?url=www.xxxxxx.com

Various Forms ②

Clone similar domains & sites

Normal domain

  • news.naver.com

Phishing domain

  • news.naverportal.com

Various Forms ③

Using Punycode

Normal

  • naver.com

  • a Alphabet

Phishing

  • nаver.com

  • а Cyrillic

Various Forms ④

Qshing attacks using QR codes

  • Download malware on connection

Various Forms ⑤

Specific targeted attacks
(malicious apps)

  • Fake traffic complaints

  • Fake obituaries

Existing security technologies can't stop phishing and smishing at the source

Combine Big Data and AI to Stop Phishing and Smishing at the Source

AI phishing analysis · prevention solutions

AskURL Detects Phishing and Smishing with Unique Analytics Technology

A solution that analyzes URLs in messages from texts, mail, messengers, and more in real time to protect against phishing, smishing, qshing, and more.

URL Analysis Process

Cyber threats (phishing, smishing, qshing)

URL Preprocessing

URL DB Search(Normal, Malignant, Scan History DB)

Extract various features and capture screenshots

Analyzing URLs using similarity analysis techniques

Final judgement on URLs using generative AI

Detection of new & variant cyber threats through data mining using a learning enginethrough data mining using a learning engine

(Current URL analysis technologies cannot detect new & variant URLs)

The Uniqueness of AskURL

AskURL Solution Competitiveness

Accurately Analyze and Block Various Types of Anomalous Phishing Attacks and Provide Detailed Analysis Results to Users

Analyzing different forms of URLs

Big data-based similarity and AI analytics

Analyzing tampered email addresses

Normal
  • noreply@google.com
Phishing
  • service@google.com

Analyze similar URLs

Normal
  • e0f8fef6f2ecfcf4
Phishing
  • e0f8eed4d2ecfcf4

Analyzing shortened URLs

Phishing
  • buly.kr/8TmnstV
  • bit.ly/47xOAt3
  • Analyze unidentifiable shortened URLs for normality

Analyzing URLs for special characters

Phishing
  • naer.com
  • aver.com
  • Detect the use of symbols that bypass filters

Analyze malicious applications

Analyze even malicious apps linked to phishing sites

How to extract malicious apps

A user requests to extract an application (APK) associated with a phishing site. URL normalization Access and analyze phishing sites Analyze phishing site vulnerabilities Phishing site attacks Extract the APK (download) Extract and store APK information and features
 
  • Personal information required
 
  • When personal information is not required

Ability to extract URLs

Extract and analyze various features in phishing URLs

bit.ly/47xOAt3 User ID Password 1 2 SIGN IN 3 4 5 6

Phishing sites and extraction information (example)

1
  • Extract DNS information, site annotations
2
  • Handling special characters
3
  • Site character
4
  • Extract final destination
5
  • Captured image
  • Sites, scripts, tags…
6
  • Extracting QR Code URLs

Provide detailed analytics

Increase user trust by providing detailed results

askurl.io/ Enter a URL, text, or QR image link to scan.

Provide analytics results and details