Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T190C41BB3431483FDE94903DCFA55748431A9A4EFB5F0D9C4AB6F0851EC0A8F6986CE96 |
|
CONTENT
ssdeep
|
1536:MsCeE9h+8tKZDluDD5aKQmEdkRAen4zJm2zubydzrhDRh2zMSyipGXt0XyI2Itm0:MsIlGiRHxi6kGQ8e7xwQkJAk5WuWc |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b399cc6626993333 |
|
VISUAL
aHash
|
e7ffe7ffe7e7ffff |
|
VISUAL
dHash
|
08000c004d0c0008 |
|
VISUAL
wHash
|
00ffc3c303033f3f |
|
VISUAL
colorHash
|
07000038000 |
|
VISUAL
cropResistant
|
08000c004d0c0008 |
The phishing kit is designed to capture user credentials through a form submission. The harvested credentials are likely transmitted to a remote server controlled by the attacker for immediate exploitation or sale on underground markets.
In addition to credentials, the kit includes functionality to intercept one-time passwords (OTPs) and steal payment card details. This allows attackers to bypass multi-factor authentication and conduct unauthorized transactions.
Here's a generic ASCII art attack flow diagram for your phishing scenario:
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 1. TARGET RECEIVES DECEPTIVE MESSAGE โ
โ - Victim directed to fake Banking page โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 2. FAKE LOGIN PAGE DISPLAYED โ
โ - Mimics legitimate Banking interface โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 3. CREDENTIALS ENTERED โ
โ - Victim submits login details โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 4. DATA COLLECTION โ
โ - Form captures entered credentials โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 5. EXFILTRATION VIA HTTP โ
โ - Credentials sent via standard form submission โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
Here's a generic ASCII art attack flow diagram for your phishing scenario:
```
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 1. TARGET RECEIVES DECEPTIVE MESSAGE โ
โ - Victim directed to fake Banking page โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 2. FAKE LOGIN PAGE DISPLAYED โ
โ - Mimics legitimate Banking interface โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 3. CREDENTIALS ENTERED โ
โ - Victim submits login details โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 4. DATA COLLECTION โ
โ - Form captures entered credentials โ
โโโโโโโโโโโโโโโโโโโโโโฌโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ
โผ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
โ 5. EXFILTRATION VIA HTTP โ
โ - Credentials sent via standard form submission โ
โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ
```
Pages with identical visual appearance (based on perceptual hash)