Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DD41C62652003853000B91D03FD221CFED819EC6EF86EB24E8F5228C2AC593FCB86255 |
|
CONTENT
ssdeep
|
48:TXwpRY1s5QdddnoddfdddZ0dddEdddoWdddi2Y+G7p6o+IEcHbxV6CrsIuLrlu5n:TIOdddnoddfdddZ0dddEdddJdddLY+G1 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b377cc1ee100f983 |
|
VISUAL
aHash
|
270727272707077f |
|
VISUAL
dHash
|
6c6d4d4d4d6deddc |
|
VISUAL
wHash
|
270727272707077f |
|
VISUAL
colorHash
|
0f600018000 |
|
VISUAL
cropResistant
|
6c6d4d4d4d6deddc,89192939300f8184,337939692b373e99,c68e1b390f4f39fc |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.