With over 1.4 billion active users and million of companies entrusting it to handle their email, Gmail has a unique vantage point on how phishing groups operate. In this talk we look into Gmail telemetry to illuminate the differences between phishing groups in terms of tactics and targets. Then, leveraging insights from the cognitive and neuro-science fields on user’s susceptibility and decision-making, we discuss why different types of users fall for phishing and how those insights can be used to improve phishing protections.
Deconstructing the Phishing Campaigns that Target Gmail Users
| Available Media | |
|---|---|
| Conference | Black Hat USA - 2019 |
| Authors | Elie Bursztein , Daniela Oliveira |
Recent
ai
Facade: High-Precision Insider Threat Detection Using Deep Contextual Anomaly Detection
publications
Usenix Security 2026
ai
ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
publications
NeurIPS 2026
Cybersecurity
DROIDCCT: Cryptographic Compliance Test via Trillion-Scale Measurement
publications
ACSAC 2025