Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1CC72403651416B3F11A352D4AA783BFF72E98B41FE57160663F407BD97C2E8ADC21920 |
|
CONTENT
ssdeep
|
384:nWJPqwKIvQiOX7cm9eaRk88PNULciUFGiLnJO3wEV3UOMFlTHV:oKqQiOX7cm9ea688PEciUFGiLnJOAEVO |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c7c7383838386bc7 |
|
VISUAL
aHash
|
0074747c74080c00 |
|
VISUAL
dHash
|
d8c8c8c4c8d8d8d8 |
|
VISUAL
wHash
|
2c7c7c7e7c3c0e08 |
|
VISUAL
colorHash
|
38000038000 |
|
VISUAL
cropResistant
|
ac2d2caeae2d2cac,d8c8c8c4c8d8d8d8 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.