Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T13532CD60919E64DE0202B047ED047F0E79F640FEBF675B6215B42E7F3AF2414CA6D21A |
|
CONTENT
ssdeep
|
192:Iue21exOxEhfFa96GevNa3iFRvcTRWVwbNNEpYQI9hFVwLlHV2dk3zUyLP:yMkFGel35oX/OQgedq1L |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
89991f1752d896ab |
|
VISUAL
aHash
|
0c7b5fd840705000 |
|
VISUAL
dHash
|
1993bb9393a3a3a3 |
|
VISUAL
wHash
|
0ff9dbd901717901 |
|
VISUAL
colorHash
|
38000018080 |
|
VISUAL
cropResistant
|
a5a4a5b149a5a4a5,c48e0f171d2f8ecc,0001c057192b8a15,1993bb9393a3a3a3,962f57131d150f8e |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Uses typical phishing tactics including brand impersonation, urgency tactics, and social engineering to trick victims into providing sensitive information.