{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:S3457VWZUHDRLSUZV2RDVCLAOH","short_pith_number":"pith:S3457VWZ","canonical_record":{"source":{"id":"2412.00586","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-30T21:02:06Z","cross_cats_sorted":[],"title_canon_sha256":"484e8c4bec4b750f6c2c97e3d0dbb07b714c974a7ca14fa68d349202bdc12e67","abstract_canon_sha256":"0fbd063bb13d4905400e0f0f0c0f701a309a5f9ffc87001fb3d7e8019fc41576"},"schema_version":"1.0"},"canonical_sha256":"96f9dfd6d9a1c715ca99aea23a896071d52d1a66a79161aaf8fdb6cd74b28246","source":{"kind":"arxiv","id":"2412.00586","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.00586","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"arxiv_version","alias_value":"2412.00586v1","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.00586","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_12","alias_value":"S3457VWZUHDR","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_16","alias_value":"S3457VWZUHDRLSUZ","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_8","alias_value":"S3457VWZ","created_at":"2026-07-05T09:42:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:S3457VWZUHDRLSUZV2RDVCLAOH","target":"record","payload":{"canonical_record":{"source":{"id":"2412.00586","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-30T21:02:06Z","cross_cats_sorted":[],"title_canon_sha256":"484e8c4bec4b750f6c2c97e3d0dbb07b714c974a7ca14fa68d349202bdc12e67","abstract_canon_sha256":"0fbd063bb13d4905400e0f0f0c0f701a309a5f9ffc87001fb3d7e8019fc41576"},"schema_version":"1.0"},"canonical_sha256":"96f9dfd6d9a1c715ca99aea23a896071d52d1a66a79161aaf8fdb6cd74b28246","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:42:44.007430Z","signature_b64":"a2dn3r/c8J2I6WOyZCSlTNfejEiv1kfj4W59/WsUUFU/jXCPFmW1zuvRDHYB3/0pHavR4Tu30kSX05lNdwXABw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"96f9dfd6d9a1c715ca99aea23a896071d52d1a66a79161aaf8fdb6cd74b28246","last_reissued_at":"2026-07-05T09:42:44.006881Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:42:44.006881Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.00586","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:42:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xbgEbC5/ToZCuYsqCLzqFALwoy/QKgGHFj8v4xwj6klpPnzy99h9SscdRDRd0ni24Bm92iMQZ9K/DFdUvQJ4Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:04:19.437980Z"},"content_sha256":"0eb0e5f9468b6b8341f00c2bed82889447fe4dc3d1f9b98e30973ddcfd62d21c","schema_version":"1.0","event_id":"sha256:0eb0e5f9468b6b8341f00c2bed82889447fe4dc3d1f9b98e30973ddcfd62d21c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:S3457VWZUHDRLSUZV2RDVCLAOH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating Large Language Models' Capability to Launch Fully Automated Spear Phishing Campaigns: Validated on Human Subjects","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andrew Kao, Arun Vishwanath, Bruce Schneier, Fred Heiding, Simon Lermen","submitted_at":"2024-11-30T21:02:06Z","abstract_excerpt":"In this paper, we evaluate the capability of large language models to conduct personalized phishing attacks and compare their performance with human experts and AI models from last year. We include four email groups with a combined total of 101 participants: A control group of arbitrary phishing emails, which received a click-through rate (recipient pressed a link in the email) of 12%, emails generated by human experts (54% click-through), fully AI-automated emails 54% (click-through), and AI emails utilizing a human-in-the-loop (56% click-through). Thus, the AI-automated attacks performed on "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.00586","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.00586/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:42:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8VDqjZet/Z5+LOaF50ISpbmEwvMflQEita0ywHHcsXiBnc7G5T/FelosRIcPce0GT7lUYhSFf6ld+eOoZC4fDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T00:04:19.438496Z"},"content_sha256":"e7a49ee8690f8dff3d298000004a3749b738164dd32d69b64503fd9b2379d83f","schema_version":"1.0","event_id":"sha256:e7a49ee8690f8dff3d298000004a3749b738164dd32d69b64503fd9b2379d83f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/S3457VWZUHDRLSUZV2RDVCLAOH/bundle.json","state_url":"https://pith.science/pith/S3457VWZUHDRLSUZV2RDVCLAOH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/S3457VWZUHDRLSUZV2RDVCLAOH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T00:04:19Z","links":{"resolver":"https://pith.science/pith/S3457VWZUHDRLSUZV2RDVCLAOH","bundle":"https://pith.science/pith/S3457VWZUHDRLSUZV2RDVCLAOH/bundle.json","state":"https://pith.science/pith/S3457VWZUHDRLSUZV2RDVCLAOH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/S3457VWZUHDRLSUZV2RDVCLAOH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:S3457VWZUHDRLSUZV2RDVCLAOH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0fbd063bb13d4905400e0f0f0c0f701a309a5f9ffc87001fb3d7e8019fc41576","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-30T21:02:06Z","title_canon_sha256":"484e8c4bec4b750f6c2c97e3d0dbb07b714c974a7ca14fa68d349202bdc12e67"},"schema_version":"1.0","source":{"id":"2412.00586","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.00586","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"arxiv_version","alias_value":"2412.00586v1","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.00586","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_12","alias_value":"S3457VWZUHDR","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_16","alias_value":"S3457VWZUHDRLSUZ","created_at":"2026-07-05T09:42:44Z"},{"alias_kind":"pith_short_8","alias_value":"S3457VWZ","created_at":"2026-07-05T09:42:44Z"}],"graph_snapshots":[{"event_id":"sha256:e7a49ee8690f8dff3d298000004a3749b738164dd32d69b64503fd9b2379d83f","target":"graph","created_at":"2026-07-05T09:42:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.00586/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we evaluate the capability of large language models to conduct personalized phishing attacks and compare their performance with human experts and AI models from last year. We include four email groups with a combined total of 101 participants: A control group of arbitrary phishing emails, which received a click-through rate (recipient pressed a link in the email) of 12%, emails generated by human experts (54% click-through), fully AI-automated emails 54% (click-through), and AI emails utilizing a human-in-the-loop (56% click-through). Thus, the AI-automated attacks performed on ","authors_text":"Andrew Kao, Arun Vishwanath, Bruce Schneier, Fred Heiding, Simon Lermen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-30T21:02:06Z","title":"Evaluating Large Language Models' Capability to Launch Fully Automated Spear Phishing Campaigns: Validated on Human Subjects"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.00586","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0eb0e5f9468b6b8341f00c2bed82889447fe4dc3d1f9b98e30973ddcfd62d21c","target":"record","created_at":"2026-07-05T09:42:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0fbd063bb13d4905400e0f0f0c0f701a309a5f9ffc87001fb3d7e8019fc41576","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-11-30T21:02:06Z","title_canon_sha256":"484e8c4bec4b750f6c2c97e3d0dbb07b714c974a7ca14fa68d349202bdc12e67"},"schema_version":"1.0","source":{"id":"2412.00586","kind":"arxiv","version":1}},"canonical_sha256":"96f9dfd6d9a1c715ca99aea23a896071d52d1a66a79161aaf8fdb6cd74b28246","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"96f9dfd6d9a1c715ca99aea23a896071d52d1a66a79161aaf8fdb6cd74b28246","first_computed_at":"2026-07-05T09:42:44.006881Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:42:44.006881Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a2dn3r/c8J2I6WOyZCSlTNfejEiv1kfj4W59/WsUUFU/jXCPFmW1zuvRDHYB3/0pHavR4Tu30kSX05lNdwXABw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:42:44.007430Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.00586","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0eb0e5f9468b6b8341f00c2bed82889447fe4dc3d1f9b98e30973ddcfd62d21c","sha256:e7a49ee8690f8dff3d298000004a3749b738164dd32d69b64503fd9b2379d83f"],"state_sha256":"58e5bd9d541ea70966f84d6b1b8192ababa5b4ab4f36e52b823d2501b56613f5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vwThAkj/d3QJ+bd6hpMlCPR0tCh2/yRzypHAQpfA9S0c0hIXFI5t/Ruckrdxdqlhtsjwz7ddkdgw0rKe7az5Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T00:04:19.443356Z","bundle_sha256":"08d142758902f0f79d19aea6f1f02af18594bdf6eb78c95e61186e570728d4f3"}}