Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T140225FB0A454A63B059396C5F3A6A77B73E59109C24B022542FCC3E84FEBE42DC36496 |
|
CONTENT
ssdeep
|
192:acPIIwXHhirhz6ONW5IItfXHPBrlq6OWxo:fIIPzuIItHqY+ |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c7e4741838c739c7 |
|
VISUAL
aHash
|
c0f07030183c7c08 |
|
VISUAL
dHash
|
9480c4e03070c050 |
|
VISUAL
wHash
|
f0f8f0781c3c7e18 |
|
VISUAL
colorHash
|
38c00008001 |
|
VISUAL
cropResistant
|
9480c4e03070c050 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 20 techniques to evade detection by security scanners and make reverse engineering more difficult.