Phishing Analysis

🔬 Threat Analysis Report

• Threat: Credential harvesting attempt via fake Microsoft login page
• Target: Users of Microsoft services
• Method: Redirects to a fake page prompting security check.
• Exfil: Unknown data exfiltration method as no form is present, likely redirect to a phishing site
• Indicators: Unofficial domain, generic message, invalid session message
• Risk: HIGH - Potential for credential theft if user is redirected to a login form on another page.

🔒 Obfuscation Detected

• atob
• eval
• fromCharCode
• unicode_escape
• base64_strings

📡 API Calls Detected

• ${TW}