Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T14D73A437C3222825663B9CCCF5936B5FE28AC30F87055A148BFC926AD5CE93567536C8 |
|
CONTENT
ssdeep
|
1536:M4wyuIeIIIePbP+8glZqwkhzP0iR7GJcENfU1RZ9zNRXFNa/NsbM10199NTU1M1q:RwUwZA |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9b9666498696d9c6 |
|
VISUAL
aHash
|
3f030f0f3919191f |
|
VISUAL
dHash
|
dcffdcdcdb3b7be5 |
|
VISUAL
wHash
|
3f030f0f3d19191f |
|
VISUAL
colorHash
|
03007000000 |
|
VISUAL
cropResistant
|
dcffdcdcdb3b7be5,bbffdffffdb1f4f8,1060860a32ca7a02,805a84851e99b921,7f4d655d59655dff,0b07030703030303 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 4 techniques to evade detection by security scanners and make reverse engineering more difficult.