SBPA: Social behavior based cross Social Network phishing attacks

Phishing attacks represent wide spread threats to Online Social Networks (OSNs). Existing research has investigated effective phishing attacks by utilizing users' public information on their OSN accounts. In this work, we demonstrate a more powerful phishing attack by extracting users' social behaviors along with other basic user information among different OSNs. Experimental evaluation shows this new phishing attack improves the success rate compared to existing phishing attacks. We also provide possible directions for mitigating the discovered attack.