Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1E972B636A104303E2E9703C12F61779DB2EB8085A6022E59EAFD975E1BC5F0EEE36545 |
|
CONTENT
ssdeep
|
384:okwCFII2h5MVlwtB5HRkws4VchBbpWGxeMT8i37Lbr:oAIIIRkzhB9Es8iP |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
a947f99218fec06c |
|
VISUAL
aHash
|
0000000000ffffdb |
|
VISUAL
dHash
|
ccc7c7e7fff82333 |
|
VISUAL
wHash
|
0021310103ffffff |
|
VISUAL
colorHash
|
01000000181 |
|
VISUAL
cropResistant
|
f0002b2b33333333,4a4bb66634752020,82a2808aaa80a2a2,c4cfc7c7e7e7eff8,0260706871b2b20c |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.