Publications

Note: The work below was done during Dr. Saha Roy's appointment at UT Arlington

  • PhishLang: A Real-Time, Fully Client-Side Phishing Detection Framework Using MobileBERT

    Sayak Saha Roy, Shirin Nilizadeh
    In Proceedings of the Network and Distributed System Security Symposium (NDSS)
    San Diego, CA, February 2026

    Read Source

  • DarkGram: A Large-Scale Analysis of Cybercriminal Activity Channels on Telegram

    Sayak Saha Roy, Elham Pourabbas Vafa, Kobra Khanmohammadi, Shirin Nilizadeh
    In Proceedings of the USENIX Security Symposium
    Seattle, WA, August 2025

    Read Source/Data

  • From Chatbots to Phishbots?: Phishing Scam Generation in Commercial Large Language Models

    Distinguished Paper Award

    Sayak Saha Roy, Poojitha Thota, Krishna Vamsi Naragam, Shirin Nilizadeh
    In Proceedings of the IEEE Symposium on Security and Privacy
    San Francisco, CA, May 2024

    Read Hugging Face ChatGPT plugin

  • Understanding the Ripple Effects: Users' Behavioral and Emotional Response to Toxicity in Twitter Conversations

    Spotlight Talk

    Ana Aleksandric, Sayak Saha Roy, Hanani Pankaj, Gabriela Mustata Wilson, Shirin Nilizadeh
    In Proceedings of the AAAI International Conference on Web and Social Media (ICWSM)
    Buffalo, NY, June 2024

    Read Dataset

  • Phishing in the Free Waters: A Study of Phishing Attacks Created using Free Website Building Services

    Sayak Saha Roy, Unique Karanjit, Shirin Nilizadeh
    In Proceedings of the ACM Internet Measurement Conference (IMC)
    Montreal, Canada, October 2023

    Read Source/Data

  • Unveiling the Risks of NFT Promotion Scams

    Sayak Saha Roy, Dipanjan Das, Priyanka Bose, Christopher Kruegel, Giovanni Vigna, Shirin Nilizadeh
    In Proceedings of the AAAI International Conference on Web and Social Media (ICWSM)
    Buffalo, NY, June 2024

    Read Dataset

  • Evaluating the Effectiveness of Phishing Reports on Twitter

    Best Paper Award

    Sayak Saha Roy, Unique Karanjit, Shirin Nilizadeh
    In APWG Symposium on Electronic Crime Research (eCrime)
    Virtual, November 2021

    Read Source-code

  • What Remains Uncaught?: Characterizing Sparsely Detected Malicious URLs on Twitter

    Sayak Saha Roy, Unique Karanjit, Shirin Nilizadeh
    In Workshop on Measurements, Attacks, and Defenses for the Web (MADWeb)
    Virtual, February 2021

    Read Source-code