Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T19153637060845A7B035742E8A67A5F6B73A38396CE3307467BF88B5D5FD3E11DE2A012 |
|
CONTENT
ssdeep
|
1536:mLOI194oNjX6v+p4cA6J5flENRkZvUjdY9y+8F:G6Wp4cidY94 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b0d44ad1b6d5e21e |
|
VISUAL
aHash
|
7e00066f6f660001 |
|
VISUAL
dHash
|
9430c48ecc8e8209 |
|
VISUAL
wHash
|
7e0007ffffe70001 |
|
VISUAL
colorHash
|
38003000081 |
|
VISUAL
cropResistant
|
9430c48ecc8e8209 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 49 techniques to evade detection by security scanners and make reverse engineering more difficult.