Chuhan Wang

Weak Links in Authentication Chains: A Large-scale Analysis of Email Sender Spoofing Attacks

2020 · arXiv (Cornell University)

As a fundamental communicative service, email is playing an important role in both individual and corporate communications, which also makes it one of the most frequently attack vectors. An email's authenticity is based on an …

Inbox Invasion: Exploiting MIME Ambiguities to Evade Email Attachment Detectors

2024

Email attachments have become a favored delivery vector for malware campaigns. In response, email attachment detectors are widely deployed to safeguard email security. However, an emerging threat arises when adversaries exploit parsing discrepancies between email …