{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:I6T7VUVWWTS7B76R7VFHKCB6LI","short_pith_number":"pith:I6T7VUVW","canonical_record":{"source":{"id":"2505.12104","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T18:14:57Z","cross_cats_sorted":[],"title_canon_sha256":"70458072fe8fff9827efafaca9fb2bfecd1011d7a39406e41925e55673313a4f","abstract_canon_sha256":"89da8e8390fe3bdd2321b9265c202d65d1c59a8cd5d5e07a282ce405b1bc41a5"},"schema_version":"1.0"},"canonical_sha256":"47a7fad2b6b4e5f0ffd1fd4a75083e5a25c144108b0b9683f2c4a0b759fd63b8","source":{"kind":"arxiv","id":"2505.12104","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12104","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12104v1","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12104","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"I6T7VUVWWTS7","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"I6T7VUVWWTS7B76R","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"I6T7VUVW","created_at":"2026-07-05T11:04:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:I6T7VUVWWTS7B76R7VFHKCB6LI","target":"record","payload":{"canonical_record":{"source":{"id":"2505.12104","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T18:14:57Z","cross_cats_sorted":[],"title_canon_sha256":"70458072fe8fff9827efafaca9fb2bfecd1011d7a39406e41925e55673313a4f","abstract_canon_sha256":"89da8e8390fe3bdd2321b9265c202d65d1c59a8cd5d5e07a282ce405b1bc41a5"},"schema_version":"1.0"},"canonical_sha256":"47a7fad2b6b4e5f0ffd1fd4a75083e5a25c144108b0b9683f2c4a0b759fd63b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:58.639785Z","signature_b64":"AyZVs1xSmg1M2ic+FIZzQQCoA1ZGneUzk7JjWWNaidqnBubNo69spj9kfIjm+NAMp9TVDbWYnxBul3/Q0KOiAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"47a7fad2b6b4e5f0ffd1fd4a75083e5a25c144108b0b9683f2c4a0b759fd63b8","last_reissued_at":"2026-07-05T11:04:58.639253Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:58.639253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.12104","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/RQEaHPfNjtNjvZZCj2F7NOvhsgqNG+4+tAljvZK5/StIREyBMKUTc+KRuFwYfxFMjQBgXDjyyfvGKtLjH/WDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:34:58.161743Z"},"content_sha256":"9a133a0ddd94a43d142d2ae40c1f4a900c8f57fa2a8fad0f56413e9476b393a2","schema_version":"1.0","event_id":"sha256:9a133a0ddd94a43d142d2ae40c1f4a900c8f57fa2a8fad0f56413e9476b393a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:I6T7VUVWWTS7B76R7VFHKCB6LI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"The Impact of Emerging Phishing Threats: Assessing Quishing and LLM-generated Phishing Emails against Organizations","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Giovanni Apruzzese, Luca Allodi, Marie Weinz, Nicola Zannone","submitted_at":"2025-05-17T18:14:57Z","abstract_excerpt":"Modern organizations are persistently targeted by phishing emails. Despite advances in detection systems and widespread employee training, attackers continue to innovate, posing ongoing threats. Two emerging vectors stand out in the current landscape: QR-code baits and LLM-enabled pretexting. Yet, little is known about the effectiveness of current defenses against these attacks, particularly when it comes to real-world impact on employees. This gap leaves uncertainty around to what extent related countermeasures are justified or needed. Our work addresses this issue.\n  We conduct three phishin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12104","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.12104/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3gIYEGn0d/1zpTTk+vE1Ap+p1oyeUkmKWQfLRlhw0mQqVYYd40A1j2a6d+Jx6sZMwoJrnQ+42fxo+PvmqiVICA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:34:58.162633Z"},"content_sha256":"2c6f9afe6b18b258391b79a72e3086ceb046341fed6283fefe5bb66e1c91caf5","schema_version":"1.0","event_id":"sha256:2c6f9afe6b18b258391b79a72e3086ceb046341fed6283fefe5bb66e1c91caf5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/bundle.json","state_url":"https://pith.science/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T16:34:58Z","links":{"resolver":"https://pith.science/pith/I6T7VUVWWTS7B76R7VFHKCB6LI","bundle":"https://pith.science/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/bundle.json","state":"https://pith.science/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I6T7VUVWWTS7B76R7VFHKCB6LI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:I6T7VUVWWTS7B76R7VFHKCB6LI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"89da8e8390fe3bdd2321b9265c202d65d1c59a8cd5d5e07a282ce405b1bc41a5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T18:14:57Z","title_canon_sha256":"70458072fe8fff9827efafaca9fb2bfecd1011d7a39406e41925e55673313a4f"},"schema_version":"1.0","source":{"id":"2505.12104","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.12104","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"arxiv_version","alias_value":"2505.12104v1","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.12104","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_12","alias_value":"I6T7VUVWWTS7","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_16","alias_value":"I6T7VUVWWTS7B76R","created_at":"2026-07-05T11:04:58Z"},{"alias_kind":"pith_short_8","alias_value":"I6T7VUVW","created_at":"2026-07-05T11:04:58Z"}],"graph_snapshots":[{"event_id":"sha256:2c6f9afe6b18b258391b79a72e3086ceb046341fed6283fefe5bb66e1c91caf5","target":"graph","created_at":"2026-07-05T11:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.12104/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern organizations are persistently targeted by phishing emails. Despite advances in detection systems and widespread employee training, attackers continue to innovate, posing ongoing threats. Two emerging vectors stand out in the current landscape: QR-code baits and LLM-enabled pretexting. Yet, little is known about the effectiveness of current defenses against these attacks, particularly when it comes to real-world impact on employees. This gap leaves uncertainty around to what extent related countermeasures are justified or needed. Our work addresses this issue.\n  We conduct three phishin","authors_text":"Giovanni Apruzzese, Luca Allodi, Marie Weinz, Nicola Zannone","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T18:14:57Z","title":"The Impact of Emerging Phishing Threats: Assessing Quishing and LLM-generated Phishing Emails against Organizations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.12104","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9a133a0ddd94a43d142d2ae40c1f4a900c8f57fa2a8fad0f56413e9476b393a2","target":"record","created_at":"2026-07-05T11:04:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"89da8e8390fe3bdd2321b9265c202d65d1c59a8cd5d5e07a282ce405b1bc41a5","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-17T18:14:57Z","title_canon_sha256":"70458072fe8fff9827efafaca9fb2bfecd1011d7a39406e41925e55673313a4f"},"schema_version":"1.0","source":{"id":"2505.12104","kind":"arxiv","version":1}},"canonical_sha256":"47a7fad2b6b4e5f0ffd1fd4a75083e5a25c144108b0b9683f2c4a0b759fd63b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"47a7fad2b6b4e5f0ffd1fd4a75083e5a25c144108b0b9683f2c4a0b759fd63b8","first_computed_at":"2026-07-05T11:04:58.639253Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:58.639253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"AyZVs1xSmg1M2ic+FIZzQQCoA1ZGneUzk7JjWWNaidqnBubNo69spj9kfIjm+NAMp9TVDbWYnxBul3/Q0KOiAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:58.639785Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.12104","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9a133a0ddd94a43d142d2ae40c1f4a900c8f57fa2a8fad0f56413e9476b393a2","sha256:2c6f9afe6b18b258391b79a72e3086ceb046341fed6283fefe5bb66e1c91caf5"],"state_sha256":"3fb78e08170e54217addead05fe72e2ef0a3d8d2795ffc7ab54e2c318f8e4fa3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tDY0BnGefmB4eBLa7tI6nKIL/PfkCjElKl0fpHNoR3CRYvzopcBaxI+oIkpWaH3binBEg4PBT6GjQGK6MQRLCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T16:34:58.170096Z","bundle_sha256":"e7d66eefb9b2b0099107344ef5dbf21d8faa41bd40c7c20e7f61eb740c067b2c"}}