Detecting Phishing Sites Using ChatGPT

The rise of large language models (LLMs) has had a significant impact on various domains, including natural language processing and artificial intelligence. While LLMs such as ChatGPT have been extensively researched for tasks such as code generation and text synthesis, their application in detecting malicious web content, particularly phishing sites, has been largely unexplored. To combat the rising tide of automated cyber attacks facilitated by LLMs, it is imperative to automate the detection of malicious web content, which requires approaches that leverage the power of LLMs to analyze and classify phishing sites. In this paper, we propose a novel method that utilizes ChatGPT to detect phishing sites. Our approach involves leveraging a web crawler to gather information from websites and generate prompts based on this collected data. This approach enables us to detect various phishing sites without the need for fine-tuning machine learning models and identify social engineering techniques from the context of entire websites and URLs. To evaluate the performance of our proposed method, we conducted experiments using a dataset. The experimental results using GPT-4 demonstrated promising performance, with a precision of 98.3% and a recall of 98.4%. Comparative analysis between GPT-3.5 and GPT-4 revealed an enhancement in the latter's capability to reduce false negatives. These findings not only highlight the potential of LLMs in efficiently identifying phishing sites but also have significant implications for enhancing cybersecurity measures and protecting users from the dangers of online fraudulent activities

PhishReplicant: A Language Model-based Approach to Detect Generated Squatting Domain Names

Domain squatting is a technique used by attackers to create domain names for phishing sites. In recent phishing attempts, we have observed many domain names that use multiple techniques to evade existing methods for domain squatting. These domain names, which we call generated squatting domains (GSDs), are quite different in appearance from legitimate domain names and do not contain brand names, making them difficult to associate with phishing. In this paper, we propose a system called PhishReplicant that detects GSDs by focusing on the linguistic similarity of domain names. We analyzed newly registered and observed domain names extracted from certificate transparency logs, passive DNS, and DNS zone files. We detected 3,498 domain names acquired by attackers in a four-week experiment, of which 2,821 were used for phishing sites within a month of detection. We also confirmed that our proposed system outperformed existing systems in both detection accuracy and number of domain names detected. As an in-depth analysis, we examined 205k GSDs collected over 150 days and found that phishing using GSDs was distributed globally. However, attackers intensively targeted brands in specific regions and industries. By analyzing GSDs in real time, we can block phishing sites before or immediately after they appear.Comment: Accepted at ACSAC 202

MOLECULAR DESIGN OF SUGAR-FREE MIGRACIN ANALOG MIGRACINAL THAT INHIBITS OVARIAN CANCER CELL MIGRATION AND INVASION

Introduction. Cancer metastasis consists of several steps including detachment from the primary tumor, migration, invasion, transport in the blood or lymphatic vessels, attachment at the secondary site, and growth of secondary tumor. Migration and invasion areinvolved in the mechanism of all types of cancer metastasis. We previously isolated novel cellular migration inhibitor migracin A and B from a culture filtrate of Streptomyces sp. Migracin A was shown to inhibit IGF-1-mediated cellular migration and invasion in ovarian carcinoma cells. However, it is difficult to prepare large amount of migracin A. Migracin A consists of substituted benzene and an alkylated sugar moiety. In the present research, we have designed and synthesized a simplified dialdehydederivative of migracin called migracinal having no sugar moiety. Material and methods. Migracinal was purchased from Techno Chem Co., Ltd., Tokyo, Japan. Migracinal was prepared from 2,4-dihydroxybenzaldehyde (2,4-DHBA). The structure was confirmed by proton and carbon NMR spectra and ESI mass spectroscopy. The antitumor activity of the new derivative was studied by standard tests under conditions in vitro. Results. Migracinal inhibited cellular migration and invasion in ovarian clear cell carcinoma ES-2 cells. It also inhibited IGF-1 expression as migracin A. Moreover, it induced anoikis rather than apoptosis in ES-2 cells.Conclusions. Migracinal is easier to prepare than migracins, and it may be useful for the mechanistic study and suppression of metastasis. Введение. Процесс метастазирования рака состоит из нескольких этапов: отсоединение клеток от первичной опухоли, миграцию, инвазию, перемещение в крови или лимфатических сосудах, присоединение и рост вторичной опухоли. Механизмы миграции и инвазии универсальны для всех видов рака. Ранее из культуры Streptomyces SP мы выделили Migracin А и В - новые ингибиторы клеточной миграции. Было продемонстрировано как Migracin А ингибирует IGF-1-опосредованную миграцию и инвазию клеток рака яичников. Однако большое количество Migracin А, состоящего из замещенного бензола и алкилированного углеводного фрагмента, синтезировать трудоемко. В настоящем исследовании мы разработали и синтезировали упрощенное производное диальдегида Migracin, не имеющего углеводного компонента, названное Migracinal. Материалы и методы. Migracin приобретался у компании «ТехноХим Co., Лтд» (Токио, Япония). Производное Migracinal получали взаимодействием Migracin с 2,4-дигидроксибензалдегидом. Структура была подтверждена спектрами ЯМР и масс-спектроскопией. Противоопухолевая активность нового производного изучалась стандартными тестами в условиях in vitro. Результаты. Установлено, что Migracinal ингибирует клеточную миграцию и инвазию клеток ES-2 рака яичника и аналогично Migracin A ингибирует IGF-1 экспрессию. Кроме того, он индуцировал аноикис, а не апоптоз в клетках ES-2.Заключение. Синтез Migracinal легче в сравнении с Migracin, а спектр противоопухолевой активности идентичен, что может быть использовано для подавления процессов метастазирования.

Comparative Evaluation of Direct Thrombin and Factor Xa Inhibitors with Antiplatelet Agents under Flow and Static Conditions: An In Vitro Flow Chamber Model

Dabigatran and rivaroxaban are novel oral anticoagulants that specifically inhibit thrombin and factor Xa, respectively. The aim of this study is to elucidate antithrombotic properties of these anticoagulant agents under arterial and venous shear conditions. Whole blood samples treated with dabigatran or rivaroxaban at 250, 500, and 1000 nM, with/without aspirin and AR-C66096, a P2Y12 antagonist, were perfused over a microchip coated with collagen and tissue thromboplastin at shear rates of 240 and 600 s−1. Fibrin-rich platelet thrombus formation was quantified by monitoring flow pressure changes. Dabigatran at higher concentrations (500 and 1000 nM) potently inhibited thrombus formation at both shear rates, whereas 1000 nM of rivaroxaban delayed, but did not completely inhibit, thrombus formation. Dual antiplatelet agents weakly suppressed thrombus formation at both shear rates, but intensified the anticoagulant effects of dabigatran and rivaroxaban. The anticoagulant effects of dabigatran and rivaroxaban were also evaluated under static conditions using thrombin generation (TG) assay. In platelet-poor plasma, dabigatran at 250 and 500 nM efficiently prolonged the lag time (LT) and moderately reduce peak height (PH) of TG, whereas rivaroxaban at 250 nM efficiently prolonged LT and reduced PH of TG. In platelet-rich plasma, however, both anticoagulants efficiently delayed LT and reduced PH of TG. Our results suggest that dabigatran and rivaroxaban may exert distinct antithrombotic effects under flow conditions, particularly in combination with dual antiplatelet therapy

Canary in Twitter Mine: Collecting Phishing Reports from Experts and Non-experts

The rise in phishing attacks via e-mail and short message service (SMS) has not slowed down at all. The first thing we need to do to combat the ever-increasing number of phishing attacks is to collect and characterize more phishing cases that reach end users. Without understanding these characteristics, anti-phishing countermeasures cannot evolve. In this study, we propose an approach using Twitter as a new observation point to immediately collect and characterize phishing cases via e-mail and SMS that evade countermeasures and reach users. Specifically, we propose CrowdCanary, a system capable of structurally and accurately extracting phishing information (e.g., URLs and domains) from tweets about phishing by users who have actually discovered or encountered it. In our three months of live operation, CrowdCanary identified 35,432 phishing URLs out of 38,935 phishing reports. We confirmed that 31,960 (90.2%) of these phishing URLs were later detected by the anti-virus engine, demonstrating that CrowdCanary is superior to existing systems in both accuracy and volume of threat extraction. We also analyzed users who shared phishing threats by utilizing the extracted phishing URLs and categorized them into two distinct groups - namely, experts and non-experts. As a result, we found that CrowdCanary could collect information that is specifically included in non-expert reports, such as information shared only by the company brand name in the tweet, information about phishing attacks that we find only in the image of the tweet, and information about the landing page before the redirect

Establishment of a novel collagenase perfusion method to isolate rat pancreatic stellate cells and investigation of their gene expression of TGF-beta1, type I collagen, and CTGF in primary culture or freshly isolated cells.

In studies of the pathogenesis of pancreatic fibrosis, pancreatic stellate cells (PSCs) have recently gained attention. In the present study, we established a new collagenase perfusion method through thoracic aorta cannulation to isolate PSCs, and we studied gene expression of TGF-beta1, type I collagen, and connective tissue growth factor using primary cultured PSCs. Our method facilitated PSC isolation, and by our new method, 4.3 +/- 1.2 x 10(6) PSCs were obtained from a rat. In comparing the expression of these genes with that of hepatic stellate cells (HSCs), we observed a similar pattern, although PSCs expressed type I collagen gene earlier than did HSCs. These results suggest that PSCs may play an important role in fibrosis of the pancreas, as HSCs do in liver fibrosis; in addition, PSCs may exist in a preactivated state or may be more easily activated than are HSCs. We also isolated the PSCs from a WBN/Kob rat, the spontaneous pancreatitis rat, and compared the gene expression with that from a normal rat

Legionella pneumophila infection induces programmed cell death, caspase activation, and release of high-mobility group box 1 protein in A549 alveolar epithelial cells: inhibition by methyl prednisolone

<p>Abstract</p> <p>Background</p> <p><it>Legionella pneumophila </it>pneumonia often exacerbates acute lung injury (ALI) and acute respiratory distress syndrome (ARDS). Apoptosis of alveolar epithelial cells is considered to play an important role in the pathogenesis of ALI and ARDS. In this study, we investigated the precise mechanism by which A549 alveolar epithelial cells induced by <it>L. pneumophila </it>undergo apoptosis. We also studied the effect of methyl prednisolone on apoptosis in these cells.</p> <p>Methods</p> <p>Nuclear deoxyribonucleic acid (DNA) fragmentation and caspase activation in <it>L. pneumophila</it>-infected A549 alveolar epithelial cells were assessed using the terminal deoxyribonucleotidyl transferase-mediated triphosphate (dUTP)-biotin nick end labeling method (TUNEL method) and colorimetric caspase activity assays. The virulent <it>L. pneumophila </it>strain AA100jm and the avirulent <it>dotO </it>mutant were used and compared in this study. In addition, we investigated whether methyl prednisolone has any influence on nuclear DNA fragmentation and caspase activation in A549 alveolar epithelial cells infected with <it>L. pneumophila</it>.</p> <p>Results</p> <p>The virulent strain of <it>L. pneumophila </it>grew within A549 alveolar epithelial cells and induced subsequent cell death in a dose-dependent manner. The avirulent strain <it>dotO </it>mutant showed no such effect. The virulent strains of <it>L. pneumophila </it>induced DNA fragmentation (shown by TUNEL staining) and activation of caspases 3, 8, 9, and 1 in A549 cells, while the avirulent strain did not. High-mobility group box 1 (HMGB1) protein was released from A549 cells infected with virulent <it>Legionella</it>. Methyl prednisolone (53.4 μM) did not influence the intracellular growth of <it>L. pneumophila </it>within alveolar epithelial cells, but affected DNA fragmentation and caspase activation of infected A549 cells.</p> <p>Conclusion</p> <p>Infection of A549 alveolar epithelial cells with <it>L. pneumophila </it>caused programmed cell death, activation of various caspases, and release of HMGB1. The dot/icm system, a major virulence factor of <it>L. pneumophila</it>, is involved in the effects we measured in alveolar epithelial cells. Methyl prednisolone may modulate the interaction of <it>Legionella </it>and these cells.</p