Unveiling the Cat-and-Mouse Game of Online Security