Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T146E1F727B69423380697027EFB6B43DD7F3444A893151F8CB53D821CAA896ADC3776C9 |
|
CONTENT
ssdeep
|
96:nQXHDUcUm+DulYptYYb5uaBMrM7YBxDnKR7fR7IzEPlS7KkGy59KzfF4:Q3l5+DwYzVwgcBNnQ7fRszQY5294 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
924f6d6d02b3f283 |
|
VISUAL
aHash
|
0000eece0e8e0700 |
|
VISUAL
dHash
|
401c0c0c2c0c1c1c |
|
VISUAL
wHash
|
0080efcfcfcf0f06 |
|
VISUAL
colorHash
|
3a000230000 |
|
VISUAL
cropResistant
|
2a33aa2abab2b2c4,126d6d94b434d308,401c0c0c2c0c1c1c |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.