I can't recognize (yet): Delayed Rendering to Defeat Visual Phishing Detectors

2026-04-30

AI Summary

This study addresses a critical temporal vulnerability in existing visual phishing detection methods, which capture webpage snapshots before key elements—such as logos—are fully rendered, leading to misleading similarity assessments. We systematically propose and validate a novel adversarial attack based on delayed rendering (e.g., curtain effects) that reveals essential content only after the detection snapshot is taken, thereby reducing the detection rate of state-of-the-art detectors from 100% to 0%. User studies confirm that such perturbations remain imperceptible to ordinary users (p<0.05). To counter this threat, we design and implement a lightweight browser extension that provides effective local protection without relying on remote services, exposing significant reliability gaps in current visual phishing defenses under real-world conditions.

Abstract

Phishing webpages are continuously polluting the Web. Plenty of countermeasures have been proposed and the most advanced techniques leverage machine-learning methods that infer whether a webpage is benign or not by inspecting its visual representation. Yet, despite the demonstrated effectiveness of such detection methods, this class of defenses is, by design, susceptible to a kind of subtle-but-cheap timing-based attacks which -- worryingly, and perhaps surprisingly -- have never been investigated so far. Such an oversight questions the overall reliability of these defenses in the wild. First, we show that timing-based evasion attacks have not been accounted for by prior work on visual phishing websites detectors. Then, we elucidate the intrinsic vulnerability of these detectors: they can be bypassed by delaying the rendering of webpage elements. Practically, these detectors must compute the visual similarity between a target webpage and a known legitimate one. This requires taking a "snapshot" of the target webpage before the similarity computation. Attackers can deliberately delay the rendering of key elements, such as the logo, so that these elements appear fully only after the snapshot has been taken. This simple tactic misleads the visual-similarity module, leading the system to incorrectly classify the phishing page as benign. We empirically show that state-of-the-art detectors can be completely defeated (detection rate dropping from 100% to 0%) by employing easy-to-apply problem-space techniques such as curtain effects. We also carry out a user study, evaluating the effectiveness of these attacks against real humans, and find that end users are unable to reliably identify our "perturbations" (p<.05). Finally, we propose mitigations, including a browser-extension that, without making any call to remote services, warns users that they may have landed on a phishing webpage.

Problem

• phishing detection
• visual similarity
• timing-based attack
• delayed rendering
• evasion attack

Innovation

• delayed rendering
• visual phishing detection
• timing-based evasion
• snapshot bypass
• browser extension mitigation