Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DF8162735140642F86E3DB10FFA2B15CA2B2C281D0172A1176ED47CA1ED7E8ACE2306D |
|
CONTENT
ssdeep
|
96:TOmF5h2LdMFeMvX9nBUe46xMIZEEMeQIXtOulQ/N7:qm0Ld+egX9nB54oPhMeQIXkueF7 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
af4f43f2b83c24c4 |
|
VISUAL
aHash
|
00000007ffffffff |
|
VISUAL
dHash
|
2b41763e088e0c9e |
|
VISUAL
wHash
|
00000000ffffffff |
|
VISUAL
colorHash
|
07007000040 |
|
VISUAL
cropResistant
|
caee98d0d26d246c,0005a8d4d42b8000,3f304e8e0c0c969e,2a2b4b414574a63f |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.