Phishing Analysis

🔬 Threat Analysis Report

• Threat: Credential harvesting phishing targeting SwissPass users.
• Target: SwissPass users seeking to access their accounts.
• Method: Presents a fake login form to steal email addresses and passwords.
• Exfil: Likely sends data to a remote server controlled by the attacker (details unavailable).
• Indicators: Domain mismatch (jvu.twj.mybluehost.me instead of swisspass.ch), a valid, but untrusted domain.
• Risk: HIGH - Real-time credential theft leading to account compromise.

🔐 Credential Harvesting Forms

🎯 Kit Endpoints

• ./Login _ SwissPass_files/favicon.ico?v=20140709-1126

📤 Form Action Targets

• load.php