Phishing in the age of distributed intelligence: taxonomies, detection strategies, and the emerging role of federated learning

Read full text
Authors: Esraa Daoud, Javier Garcia-Blas, Sadi A. Alawadi, J. Carretero
Cited by: 1
References: 170

Abstract

Abstract Phishing has evolved into one of the most adaptive and damaging cybersecurity threats, continually reshaping itself to exploit human behaviour, technical vulnerabilities, and, more recently, advances in artificial intelligence. As attack vectors diversify from traditional email scams to sophisticated, multi-stage, AI-generated, and hybrid phishing campaigns, defending against them has become significantly challenging. This survey provides a comprehensive and contemporary examination of the phishing landscape, tracing its evolution, analysing real-world incidents, and contextualising its growing impact through global statistics. We introduce a unified, multidimensional taxonomy that categorizes phishing attacks into distinct categories, providing a clearer understanding of how new attack techniques operate and escalate. In parallel, we review a broader range of phishing detection strategies, from list-based, heuristic, and similarity-driven techniques to modern machine learning and deep learning approaches. While these methods have advanced detection capabilities, they continue to face significant constraints related to data privacy, scalability, and the rapid emergence of novel attack patterns. Motivated by these limitations, the survey highlights the growing relevance of Federated Learning (FL) as a privacy-preserving and collaborative paradigm for phishing detection. To the best of our knowledge, this is the first comprehensive survey to examine phishing defence through the lens of FL. In particular, we examine the role of FL in enabling decentralized, privacy-aware detection without exchanging raw data, compared to centralized training in terms of performance, privacy guarantees, resilience, and scalability. Drawing from this analysis, we offer valuable insights into critical research gaps and future directions for developing robust, scalable, and privacy-aware phishing detection solutions.

Fields of Study & Subjects

Spam and Phishing Detection Advanced Malware Detection Techniques Adversarial Robustness in Machine Learning

Publication details

Journal / source
Progress in Artificial Intelligence
Publisher
Springer Science and Business Media LLC
Volume
15
Issue
3
Pages
949-980
Publication date
13 April 2026
Language
EN