Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F13294F24054602F219B82CB8F25576C33FA61FAE5B60346A7E9878DDBDEC81DD06845 |
|
CONTENT
ssdeep
|
192:cJoDclWcl8I6z40AAAqRZ6aqCBK6qclzBcl1tcl4r2Qf4K40W1AAqRZ6WmXLIlT2:XclWclT0pRZ6aq4/qclzBcl1tcl4r2fB |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
93929c2ce5b49e96 |
|
VISUAL
aHash
|
7e6c2c6c60181018 |
|
VISUAL
dHash
|
f4c9c9c8d230b2f1 |
|
VISUAL
wHash
|
ff7e7c6c003c1838 |
|
VISUAL
colorHash
|
31600000040 |
|
VISUAL
cropResistant
|
f4c9c9c8d230b2f1 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.