Compromising a website that is routinely visited by employees of a targeted organization
has become a popular technique for nation-state level adversaries to penetrate an …

Unlike a random, run-of-the-mill website infection, in a strategic web attack, the adversary
carefully chooses the target frequently visited by an organization or a group of individuals to …

Compromised websites that redirect users to malicious websites are often used by attackers
to distribute malware. These attackers compromise popular websites and integrate them into …

Over 55% of the world's websites run on Content Management Systems (CMS).
Unfortunately, this huge user population has made CMS-based websites a high-profile …

Through injecting dynamic script codes into compromised websites, attackers have widely
launched search poisoning attacks to achieve their malicious goals, such as spreading …

Website defacement is the practice of altering the web pages of a website after its
compromise. The altered pages, called deface pages, can negatively affect the reputation …

In 2019, the US Department of Homeland Security issued an emergency warning about
DNS infrastructure tampering. This alert, in response to a series of attacks against foreign …

Performing detailed forensic analysis of real-world web security incidents targeting users,
such as social engineering and phishing attacks, is a notoriously challenging and time …

Since its introduction, the honeypot has been used by researchers to track and learn the
cyber attack into organization infrastructures. With the continuous rise of cyberattacks …

Malicious webpages are a prevalent and severe threat in the Internet security landscape.
This fact has motivated numerous static and dynamic techniques to alleviate such threat …