Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1D472B632B640353F0A9386C17B66235EAB764142B3161A4EC5FC828D4FD9E0DFE3B691 |
|
CONTENT
ssdeep
|
384:cQpPIIDJQ8VybbxfNq3JXtSCMx3d3nKpM:cwIIDJL4xfNq5XoCMbx |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
aa42c57d91393fd0 |
|
VISUAL
aHash
|
00000000ff8183ff |
|
VISUAL
dHash
|
c7c7c7e3ab33330f |
|
VISUAL
wHash
|
00710101ffc3dbff |
|
VISUAL
colorHash
|
020000001c0 |
|
VISUAL
cropResistant
|
f00f332b33330fd0,8ec7e3c7c5e7e7f8,dffb69ccf0b2b2cf |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.