Reproduce “Measurement of the Usage of Web Clips in Underground Economy” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Qinyu Hu, Songyang Wu, Wenqi Sun, Zhushou Tang, Chaofan Chen, Zhiguo Ding, Xiaomei Zhang
This research provides the first comprehensive analysis of how cybercriminals exploit Apple's Web Clips technology to bypass App Store security and distribute malicious content on iOS devices. The study, based on 1,800 user complaints, identified a sophisticated underground ecosystem primarily distributing pornography, gambling, and fraud, demonstrating that criminals adapt by abusing legitimate platform features.
Key insights
- An underground ecosystem exists for Web Clips abuse, involving specialized roles such as creators, operators, and distributors.
- Cybercriminals predominantly use SSL certificates (74.62%) over Apple-issued certificates for signing malicious Web Clips, likely for anonymity and ease of acquisition.
- Malicious Web Clips are primarily used for distributing pornography, gambling platforms, and fraudulent schemes, and are most commonly spread via instant messaging platforms, social media, and live streaming.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.