IDENTIFYING PHISHING COMMUNICATIONS USING TEMPLATES

摘要

Methods, apparatus, systems, and computer-readable media are provided for determining whether electronic communications are attempts at phishing. In various implementations, a potentially-deceptive electronic communication may be matched to one or more templates of a plurality of templates in a database. Each template may represent content shared among a cluster of electronic communications sent by a trustworthy entity. In various implementations, it may be determined that an address associated with the electronic communication is not affiliated with one or more trustworthy entities associated with the one or more matched templates. In various implementations, the electronic communication may be classified as a phishing attempt based on the determining.