Can MLLMs Detect Phishing? A Comprehensive Security Benchmark Suite Focusing on Dynamic Threats and Multimodal Evaluation in Academic Environments

📅 2025-11-19
📈 Citations: 0
✨ Influential: 0
📄 PDF
🤖 AI Summary
Existing security benchmarks lack academic domain specificity and fail to capture the dynamic phishing threats and human cognitive vulnerabilities faced by multimodal large language models (MLLMs) in scholarly contexts. Method: We propose AdapT-Bench—the first multilingual, contextualized, multimodal phishing detection benchmark explicitly grounded in academic knowledge—supporting dynamic attack simulation, cross-lingual threat modeling, and human cognitive vulnerability assessment. Our approach integrates multimodal reasoning, context-aware analysis, and controllable data generation to enable fine-grained identification of highly customized phishing content. Contribution/Results: Experiments demonstrate that AdapT-Bench significantly improves MLLMs’ phishing detection accuracy in academic settings, empirically validating the effectiveness and necessity of academic knowledge injection and joint multimodal-contextual modeling.

Technology Category

Machine Learning: Large Multimodal Models (LMMs)Natural Language Processing: Language Grounding & Multi-modal NLPComputer Vision: Multi-modal Vision

Application Category

User Modeling, Personalization and Recommendation: Attacks and countermeasures in recommendation systemsGraph Algorithms and Modeling for the Web: Foundation models and LLMs for Web-related graphsWeb Mining and Content Analysis: Mining multimedia, multimodal, multilingual, cross-lingual Web data
📝 Abstract
The rapid proliferation of Multimodal Large Language Models (MLLMs) has introduced unprecedented security challenges, particularly in phishing detection within academic environments. Academic institutions and researchers are high-value targets, facing dynamic, multilingual, and context-dependent threats that leverage research backgrounds, academic collaborations, and personal information to craft highly tailored attacks. Existing security benchmarks largely rely on datasets that do not incorporate specific academic background information, making them inadequate for capturing the evolving attack patterns and human-centric vulnerability factors specific to academia. To address this gap, we present AdapT-Bench, a unified methodological framework and benchmark suite for systematically evaluating MLLM defense capabilities against dynamic phishing attacks in academic settings.
Problem

Research questions and friction points this paper is trying to address.

Evaluating MLLM security against dynamic phishing threats in academic environments
Addressing inadequacy of existing benchmarks for academic-specific phishing attacks
Developing comprehensive framework to test multimodal phishing detection capabilities
Innovation

Methods, ideas, or system contributions that make the work stand out.

AdapT-Bench framework evaluates MLLM phishing detection
Dynamic academic phishing threats with multimodal evaluation
Incorporates academic background information into security benchmarks
J
Jingzhuo Zhou
School of Computer Science and Engineering, UNSW Sydney, Sydney, Australia