PhishingNet

PhishingNet is a lightweight extension that performs rapid fraud and phishing analysis on any Gmail opened in an inbox as well as Outlook once you enable it. It provides a bar chart and signal score for the 19 main attributes in phishing emails (urgency, fear threat, curiosity, authority, reward, financial, credential, generic greeting, sender domain, links, grammar, caps tone, saas abuse, sender auth, link deception, obfuscation, attachment risk, BEC, HTML attack). Further, it flags suspicious words and gives a final verdict (safe, suspicious, phishing) along with a risk score. The extension uses deterministic as well as probabilistic methods; it uses a panel of hand-built detectors chosen due to their notoriety for being the most used manipulation tactics as well as a trained text classifier. Each score can be traced back to specific evidence. Gmail works as soon extension is installed. Outlook is optional and off by default but to turn it on press "Enable" on the extension's pop up. Phishing continues to be one of the most prevalent methods used by fraudsters to acquire people's private data. The problem is that affordable phishing defense systems used by ordinary people acts as a black box providing no explanation for the verdict on the safety of the email resulting in a very binary approach. This results in most people having no learning curve and thus are not equipped to defend for themselves especially with AI generated phishing emails that are all the more convincing. This phishing analyzer empowers users with the ability to understand the tactics employed by fraudsters and further enables them to take their cybersecurity into their own hands all while being a chrome extension. When the email is opened, the extension will read the email as displayed: sender, object, body. In Gmail, the sender auth result is read that Gmail displays but on Outlook no such data is read and only the text message is used. The text is sent to the analyzer to be checked and then to produce a verdict. It is not stored nor logged once the response is shown and is never shared with any third parties. The extension does not sign into user's Google or Microsoft account nor does it use any Google or Microsoft credentials. It does not collect name, contacts or any personal information. It does not have any advertising nor analytics.