Multilingual Email Phishing Attacks Detection using OSINT and Machine Learning

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: An, Panharith, Shafi, Rana, Mughogho, Tionge, Onyango, Onyango Allan
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866929676804423680
author An, Panharith
Shafi, Rana
Mughogho, Tionge
Onyango, Onyango Allan
author_facet An, Panharith
Shafi, Rana
Mughogho, Tionge
Onyango, Onyango Allan
contents Email phishing remains a prevalent cyber threat, targeting victims to extract sensitive information or deploy malicious software. This paper explores the integration of open-source intelligence (OSINT) tools and machine learning (ML) models to enhance phishing detection across multilingual datasets. Using Nmap and theHarvester, this study extracted 17 features, including domain names, IP addresses, and open ports, to improve detection accuracy. Multilingual email datasets, including English and Arabic, were analyzed to address the limitations of ML models trained predominantly on English data. Experiments with five classification algorithms: Decision Tree, Random Forest, Support Vector Machine, XGBoost, and Multinomial Naïve Bayes. It revealed that Random Forest achieved the highest performance, with an accuracy of 97.37% for both English and Arabic datasets. For OSINT-enhanced datasets, the model demonstrated an improvement in accuracy compared to baseline models without OSINT features. These findings highlight the potential of combining OSINT tools with advanced ML models to detect phishing emails more effectively across diverse languages and contexts. This study contributes an approach to phishing detection by incorporating OSINT features and evaluating their impact on multilingual datasets, addressing a critical gap in cybersecurity research.
format Preprint
id arxiv_https___arxiv_org_abs_2501_08723
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Multilingual Email Phishing Attacks Detection using OSINT and Machine Learning
An, Panharith
Shafi, Rana
Mughogho, Tionge
Onyango, Onyango Allan
Cryptography and Security
14J60 (Primary) 14F05, 14J26 (Secondary)
Email phishing remains a prevalent cyber threat, targeting victims to extract sensitive information or deploy malicious software. This paper explores the integration of open-source intelligence (OSINT) tools and machine learning (ML) models to enhance phishing detection across multilingual datasets. Using Nmap and theHarvester, this study extracted 17 features, including domain names, IP addresses, and open ports, to improve detection accuracy. Multilingual email datasets, including English and Arabic, were analyzed to address the limitations of ML models trained predominantly on English data. Experiments with five classification algorithms: Decision Tree, Random Forest, Support Vector Machine, XGBoost, and Multinomial Naïve Bayes. It revealed that Random Forest achieved the highest performance, with an accuracy of 97.37% for both English and Arabic datasets. For OSINT-enhanced datasets, the model demonstrated an improvement in accuracy compared to baseline models without OSINT features. These findings highlight the potential of combining OSINT tools with advanced ML models to detect phishing emails more effectively across diverse languages and contexts. This study contributes an approach to phishing detection by incorporating OSINT features and evaluating their impact on multilingual datasets, addressing a critical gap in cybersecurity research.
title Multilingual Email Phishing Attacks Detection using OSINT and Machine Learning
topic Cryptography and Security
14J60 (Primary) 14F05, 14J26 (Secondary)
url https://arxiv.org/abs/2501.08723