Detailed analysis of captured phishing page
No screenshot available
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T190C41BB3431483FDE94903DCFA55748431A9A4EFB5F0D9C4AB6F0851EC0A8F6986CE96 |
|
CONTENT
ssdeep
|
1536:MsCeE9h+8tKZDluDD5aKQmEdkRAen4zJm2zubydzrhDRh2zMSyipGXt0XyI2Itm0:MsIlGiRHxi6kGQ8e7xwQkJAk5WuWc |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
b399cc6626993333 |
|
VISUAL
aHash
|
e7ffe7ffe7e7ffff |
|
VISUAL
dHash
|
08000c004d0c0008 |
|
VISUAL
wHash
|
00ffc3c303033f3f |
|
VISUAL
colorHash
|
07000038000 |
|
VISUAL
cropResistant
|
08000c004d0c0008 |
The phishing kit is designed to capture user credentials through a form submission. The harvested credentials are likely transmitted to a remote server controlled by the attacker for immediate exploitation or sale on underground markets.
In addition to credentials, the kit includes functionality to intercept one-time passwords (OTPs) and steal payment card details. This allows attackers to bypass multi-factor authentication and conduct unauthorized transactions.
Here's a generic ASCII art attack flow diagram for your phishing scenario:
```
┌──────────────────────────────────────────────────────────┐
│ 1. TARGET RECEIVES DECEPTIVE MESSAGE │
│ - Victim directed to fake Banking page │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 2. FAKE LOGIN PAGE DISPLAYED │
│ - Mimics legitimate Banking interface │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 3. CREDENTIALS ENTERED │
│ - Victim submits login details │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 4. DATA COLLECTION │
│ - Form captures entered credentials │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 5. EXFILTRATION VIA HTTP │
│ - Credentials sent via standard form submission │
└──────────────────────────────────────────────────────────┘
```
Here's a generic ASCII art attack flow diagram for your phishing scenario:
```
┌──────────────────────────────────────────────────────────┐
│ 1. TARGET RECEIVES DECEPTIVE MESSAGE │
│ - Victim directed to fake Banking page │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 2. FAKE LOGIN PAGE DISPLAYED │
│ - Mimics legitimate Banking interface │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 3. CREDENTIALS ENTERED │
│ - Victim submits login details │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 4. DATA COLLECTION │
│ - Form captures entered credentials │
└────────────────────┬─────────────────────────────────────┘
│
▼
┌──────────────────────────────────────────────────────────┐
│ 5. EXFILTRATION VIA HTTP │
│ - Credentials sent via standard form submission │
└──────────────────────────────────────────────────────────┘
```
Pages with identical visual appearance (based on perceptual hash)