Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14AF21943425422B60BB70385B15A37CBBB7D884927310E20BD7F829D7E6196D66326EF |
|
CONTENT
ssdeep
|
384:m+II59rEC4gkLvkmdgXSSuf+beJEyGgQwqy5awGZOzkc21uWgs4vbab54/KOSZK3:m+IIbOLKu5NQwtavZOEvU9SMYdS |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
bc09c3f2f0c3c3f0 |
|
VISUAL
aHash
|
00000001c3ffffff |
|
VISUAL
dHash
|
bbb2f21717f474b4 |
|
VISUAL
wHash
|
19000001c3ffffff |
|
VISUAL
colorHash
|
0e200088400 |
|
VISUAL
cropResistant
|
00032b2f2bc300fd,17171f60947034b4,fbf1b2b2f2f4f6f3,fff7679bbb6befff |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.