Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1491409F081005D1F9503C29ABAB5FBC5A357B252CB5E8A9862EAD7217BC6DF3CC111E4 |
|
CONTENT
ssdeep
|
1536:t/yqXuKhCWLub3h7UdPJJIPFMRoLg1Mu7tfqPLFOc9ODAKaxLjliBlsMClsHlsX3:tuW4lujBine9ec45n |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c33cc738f2c71cc2 |
|
VISUAL
aHash
|
0020786040007070 |
|
VISUAL
dHash
|
9ce0c0c08000c8c9 |
|
VISUAL
wHash
|
ff7078604000f0f1 |
|
VISUAL
colorHash
|
38000e00000 |
|
VISUAL
cropResistant
|
e46cebeb626c4d6c,9ce0c0c08000c8c9 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters credit/debit card details including CVV and expiration. Card data is captured and can be used for fraudulent transactions or sold on dark web markets.