Exemplifying Emerging Phishing: QR-based Browser-in-The-Browser (BiTB) Attack

2025/05/25 by Akram, Muhammad Wahid, Sood, Keshav, Hassan, Muneeb Ul +1 · 2 citations
#Cryptography and Security (cs.CR) #Emerging Technologies (cs.ET) #FOS: Computer and information sciences

paper · doi:10.48550/arxiv.2505.18944

Abstract

Lately, cybercriminals constantly formulate productive approaches to exploit individuals. This article exemplifies an innovative attack, namely QR-based Browser-in-The-Browser (BiTB), using proficiencies of Large Language Model (LLM) i.e. Google Gemini. The presented attack is a fusion of two emerging attacks: BiTB and Quishing (QR code phishing). Our study underscores attack's simplistic implementation utilizing malicious prompts provided to Gemini-LLM. Moreover, we presented a case study to highlight a lucrative attack method, we also performed an experiment to comprehend the attack execution on victims' device. The findings of this work obligate the researchers' contributions in confronting this type of phishing attempts through LLMs.

Cited by

• QRïS: A Preemptive Novel Method for Quishing Detection Through Structural Features of QR
• SoK: Exposing the Generation and Detection Gaps in LLM-Generated Phishing

Related

• The Impact of Emerging Phishing Threats: Assessing Quishing and LLM-generated Phishing Emails against Organizations
• Detecting Quishing Attacks with Machine Learning Techniques Through QR Code Analysis
• CLASP: Cost-Optimized LLM-based Agentic System for Phishing Detection
• SoK: Exposing the Generation and Detection Gaps in LLM-Generated Phishing
• Next-Generation Phishing: How LLM Agents Empower Cyber Attackers