Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T184A38A3AA31047399A194BCCCBE1A919283F11DF63147798B63601B2FA2DCED5CB71D9 |
|
CONTENT
ssdeep
|
1536:xUPkMeh1m8QPTeo/Y1S11wvDIXDOGNpIfi6qxUlBYtRBa:xUbPTeo/Y1S11w4DOGNOfuUlBARs |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
ab53b469c3e103ec |
|
VISUAL
aHash
|
688400290103c387 |
|
VISUAL
dHash
|
d92c59db6bd72f2e |
|
VISUAL
wHash
|
ec9c2d693303c787 |
|
VISUAL
colorHash
|
30000e00000 |
|
VISUAL
cropResistant
|
0204081122448810,3b77ceddba64c890,a2a2a08e8f8c80a2,d92c59db6bd72f2e |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.
| ID | Portugués | Inglés | Trigger |
|---|---|---|---|
Pages with identical visual appearance (based on perceptual hash)