Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1DAF1C6B0B271067D404747B4F2A7E736234DE6ACE61AD829BB8C01A356CBC85EC973C4 |
|
CONTENT
ssdeep
|
192:a1hXmfeHeTmhdH+yZy1yKSnoW53kZ45WXi11XySYA:oXh+TmhcyZy1y5nZ0Z45WXi1dbYA |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c9b6554aa355aa55 |
|
VISUAL
aHash
|
fffffffff8f8f8f8 |
|
VISUAL
dHash
|
2936323b13111013 |
|
VISUAL
wHash
|
9d8b8988f0f0f8f8 |
|
VISUAL
colorHash
|
07038000400 |
|
VISUAL
cropResistant
|
2936323b13111013 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 286 techniques to evade detection by security scanners and make reverse engineering more difficult.