Characterizing Large-Scale Click Fraud in ZeroAccess
SLEUTH: Single-pubLisher attack dEtection Using correlaTion Hunting