Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T190120C68D940603A82139CE77471225EB0EBD10DC9026C955BB8E3E7AEC5EC1744B7BF |
|
CONTENT
ssdeep
|
192:icQj/RR+cv7jAzyJH5TlAYnd4m6hXBgxjT3+nxzZBPrKAYn9NqwNZ7ZyCISsBy5m:iNRUczjCwzAYnpuBGAYnjq+Fe7A1c |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3e3783c8b32309f |
|
VISUAL
aHash
|
60607c7c3c0c0404 |
|
VISUAL
dHash
|
c3c0c4c8f8dc1c9c |
|
VISUAL
wHash
|
e0f07c7c7e1e0e0c |
|
VISUAL
colorHash
|
30007000080 |
|
VISUAL
cropResistant
|
c3c0c4c8f8dc1c9c |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 8 techniques to evade detection by security scanners and make reverse engineering more difficult.