Dynamic Multi-Stage Phishing Detection Using Machine Learning and LLMs

As phishing attacks become more sophisticated, conventional detection methods are easily bypassed. In particular, the widespread use of Large Language Models (LLMs) has made creating and deploying phishing attacks simple. However, LLMs can also be used to detect and prevent these attacks. This paper introduces a multi-stage phishing detection system that integrates Machine Learning (ML) with multiple LLMs to improve detection performance and efficiency. The proposed system uses a robust and efficient pipeline to handle multimodal inputs for an initial high-speed URL assessment, which can result in a thorough multimodal assessment depending on the ML-based risk analysis. Experimental results using well-known datasets and sites showed that our method achieves $99.0 \%$ recall, outperforming existing approaches. Moreover, while conventional and existing approaches only provide a binary judgment, the proposed system can cost-effectively provide a detailed diagnostic report.

Authors

Institutions

Publication Details

Published
2025-09-22
DOI
https://doi.org/10.23919/apnoms67058.2025.11181259
Primary Topic
Spam and Phishing Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Dynamic Multi-Stage Phishing Detection Using Machine Learning and LLMs

Luis Guillen, Ryuichi Yoshida, Takuo Suganuma, Satoru Izumi
Spam and Phishing Detection
article

Dynamic Multi-Stage Phishing Detection Using Machine Learning and LLMs

Luis Guillen, Ryuichi Yoshida, Takuo Suganuma, Satoru Izumi
article en

Abstract

As phishing attacks become more sophisticated, conventional detection methods are easily bypassed. In particular, the widespread use of Large Language Models (LLMs) has made creating and deploying phishing attacks simple. However, LLMs can also be used to detect and prevent these attacks. This paper introduces a multi-stage phishing detection system that integrates Machine Learning (ML) with multiple LLMs to improve detection performance and efficiency. The proposed system uses a robust and efficient pipeline to handle multimodal inputs for an initial high-speed URL assessment, which can result in a thorough multimodal assessment depending on the ML-based risk analysis. Experimental results using well-known datasets and sites showed that our method achieves $99.0 \%$ recall, outperforming existing approaches. Moreover, while conventional and existing approaches only provide a binary judgment, the proposed system can cost-effectively provide a detailed diagnostic report.

Tohoku University (JP), Sendai National College of Technology (JP)
Openalex Percentile: Top 59%
Spam and Phishing Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.