{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:OUHQ6YXF5GCXYL6NIC3UH7WOWV","short_pith_number":"pith:OUHQ6YXF","canonical_record":{"source":{"id":"2507.15393","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-21T08:53:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3d8d7e5a9e8bb8cb8d4b5a4351da927fd000b9333a7cf938e49e5d1d475c12ae","abstract_canon_sha256":"c07b970844fc1e5f3607bdaef5ca14c574a0ac9dc11a5bea116e3b2322d5623b"},"schema_version":"1.0"},"canonical_sha256":"750f0f62e5e9857c2fcd40b743feceb559806258f48122fb4d174057f7d5c6c4","source":{"kind":"arxiv","id":"2507.15393","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.15393","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"arxiv_version","alias_value":"2507.15393v1","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.15393","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_12","alias_value":"OUHQ6YXF5GCX","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_16","alias_value":"OUHQ6YXF5GCXYL6N","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_8","alias_value":"OUHQ6YXF","created_at":"2026-07-05T11:40:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:OUHQ6YXF5GCXYL6NIC3UH7WOWV","target":"record","payload":{"canonical_record":{"source":{"id":"2507.15393","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-21T08:53:41Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3d8d7e5a9e8bb8cb8d4b5a4351da927fd000b9333a7cf938e49e5d1d475c12ae","abstract_canon_sha256":"c07b970844fc1e5f3607bdaef5ca14c574a0ac9dc11a5bea116e3b2322d5623b"},"schema_version":"1.0"},"canonical_sha256":"750f0f62e5e9857c2fcd40b743feceb559806258f48122fb4d174057f7d5c6c4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:40:24.119880Z","signature_b64":"M1W05886f8YWvWVEVq1KpjxqES5SR/Eo/Q1iX48qYYBhoWdOUqYx0OSVOc10uKG+zk2x1qKUNolX+gQNYfpxAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"750f0f62e5e9857c2fcd40b743feceb559806258f48122fb4d174057f7d5c6c4","last_reissued_at":"2026-07-05T11:40:24.119405Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:40:24.119405Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.15393","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:40:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NDwmG80RLFgLLVVfXQTinWNktv6adEZodlyOWPx1OebP1Rlu287HZP8HwIdMOJoR33aEP97sLqf/w0tOhwPGBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T06:19:39.859496Z"},"content_sha256":"21cd39ef655f44fe41f8c9cd17daf644948a225122b23f478e4df583bd7d1ccd","schema_version":"1.0","event_id":"sha256:21cd39ef655f44fe41f8c9cd17daf644948a225122b23f478e4df583bd7d1ccd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:OUHQ6YXF5GCXYL6NIC3UH7WOWV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jin Song Dong, Ruofan Liu, Silas Yeo Shuen Yu, Xiwen Teoh, Yun Lin, Zhenkai Liang","submitted_at":"2025-07-21T08:53:41Z","abstract_excerpt":"Phishing emails are a critical component of the cybercrime kill chain due to their wide reach and low cost. Their ever-evolving nature renders traditional rule-based and feature-engineered detectors ineffective in the ongoing arms race between attackers and defenders. The rise of large language models (LLMs) further exacerbates the threat, enabling attackers to craft highly convincing phishing emails at minimal cost.\n  This work demonstrates that LLMs can generate psychologically persuasive phishing emails tailored to victim profiles, successfully bypassing nearly all commercial and academic d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.15393","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.15393/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:40:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3xhoK+CTndWPRxKJ6eyV1PFyuPAwgG/b9SPccaeEYSMEqhm0gGlA+YCduxz7HqwkD4i2mrYYCYTlLCPowlGXDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T06:19:39.859837Z"},"content_sha256":"7cdb6eb54ce4ac063800c0ed4397072ef5886c63326b3fdd0306367bd47b2a02","schema_version":"1.0","event_id":"sha256:7cdb6eb54ce4ac063800c0ed4397072ef5886c63326b3fdd0306367bd47b2a02"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/bundle.json","state_url":"https://pith.science/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T06:19:39Z","links":{"resolver":"https://pith.science/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV","bundle":"https://pith.science/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/bundle.json","state":"https://pith.science/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OUHQ6YXF5GCXYL6NIC3UH7WOWV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OUHQ6YXF5GCXYL6NIC3UH7WOWV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c07b970844fc1e5f3607bdaef5ca14c574a0ac9dc11a5bea116e3b2322d5623b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-21T08:53:41Z","title_canon_sha256":"3d8d7e5a9e8bb8cb8d4b5a4351da927fd000b9333a7cf938e49e5d1d475c12ae"},"schema_version":"1.0","source":{"id":"2507.15393","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.15393","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"arxiv_version","alias_value":"2507.15393v1","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.15393","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_12","alias_value":"OUHQ6YXF5GCX","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_16","alias_value":"OUHQ6YXF5GCXYL6N","created_at":"2026-07-05T11:40:24Z"},{"alias_kind":"pith_short_8","alias_value":"OUHQ6YXF","created_at":"2026-07-05T11:40:24Z"}],"graph_snapshots":[{"event_id":"sha256:7cdb6eb54ce4ac063800c0ed4397072ef5886c63326b3fdd0306367bd47b2a02","target":"graph","created_at":"2026-07-05T11:40:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.15393/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Phishing emails are a critical component of the cybercrime kill chain due to their wide reach and low cost. Their ever-evolving nature renders traditional rule-based and feature-engineered detectors ineffective in the ongoing arms race between attackers and defenders. The rise of large language models (LLMs) further exacerbates the threat, enabling attackers to craft highly convincing phishing emails at minimal cost.\n  This work demonstrates that LLMs can generate psychologically persuasive phishing emails tailored to victim profiles, successfully bypassing nearly all commercial and academic d","authors_text":"Jin Song Dong, Ruofan Liu, Silas Yeo Shuen Yu, Xiwen Teoh, Yun Lin, Zhenkai Liang","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.15393","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21cd39ef655f44fe41f8c9cd17daf644948a225122b23f478e4df583bd7d1ccd","target":"record","created_at":"2026-07-05T11:40:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c07b970844fc1e5f3607bdaef5ca14c574a0ac9dc11a5bea116e3b2322d5623b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-21T08:53:41Z","title_canon_sha256":"3d8d7e5a9e8bb8cb8d4b5a4351da927fd000b9333a7cf938e49e5d1d475c12ae"},"schema_version":"1.0","source":{"id":"2507.15393","kind":"arxiv","version":1}},"canonical_sha256":"750f0f62e5e9857c2fcd40b743feceb559806258f48122fb4d174057f7d5c6c4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"750f0f62e5e9857c2fcd40b743feceb559806258f48122fb4d174057f7d5c6c4","first_computed_at":"2026-07-05T11:40:24.119405Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:40:24.119405Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"M1W05886f8YWvWVEVq1KpjxqES5SR/Eo/Q1iX48qYYBhoWdOUqYx0OSVOc10uKG+zk2x1qKUNolX+gQNYfpxAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:40:24.119880Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.15393","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21cd39ef655f44fe41f8c9cd17daf644948a225122b23f478e4df583bd7d1ccd","sha256:7cdb6eb54ce4ac063800c0ed4397072ef5886c63326b3fdd0306367bd47b2a02"],"state_sha256":"ccc9456add641daee5ded6e5dc49e3e90d74c1ca52e87bd761175205546775c0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AaODoQfhGMLIKvcmnqRtEQDpz3xz5ALcv2c/3ku7G1mmd8O8kNOw5CxM8ikhoX4xE6rpIWgR8ENZoDhPu6l8Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T06:19:39.862432Z","bundle_sha256":"d3ea2ea8ddc0bed00ba0c05e0cfe5dd621b23ac4dfefca19f033bbc1176b0819"}}