"Please don't send that bot anything": A Mixed-methods Study of Personal...
summary
Mixed-methods measurement of PROSPER shows attackers monitor payment-related posts and impersonate ordinary users to reroute funds, tracking 181 PROSPER attacks over three months and identifying 70 distinct payment accounts and human-in-the-loop plus bot operations. Quantitative results show 80% start within 10 minutes of a trigger and 90% use handles differing by one character. Findings document PayPal Friends-and-Family abuse, urgency and misspelling evasion tactics, and recommend handle-change limits, clearer handle UI, cross-platform blacklists, and transaction warnings.
AI-written summary · about
chapters (6)
- 0:00Personal impersonation attacks
- 1:15Prosper attacks on social media
- 3:24Identifying trigger posts
- 5:10Collecting attack data
- 6:36Attacker tactics and evasion
- 8:02Recommendations for platforms and users
related talks
49mAre you human or a damn bot?
40mYou have a security problem - your users
16mProtecting your application from bot attacks (PRT019)
26mIntegrating Identity and Fraud
51mAutomated Threats: The Rise of Bots and What to Do About It
31mStrategies for Identifying and Mitigating Bot Threats
40mSherlock and Watson Fight Deep Social Engineering
20mSecuring your App and the History of Guerilla Warfare