Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T199F27331A251AE3B40A792E9E3A5632B32D2938AC946124583FC43BD0FEBDC5FD36554 |
|
CONTENT
ssdeep
|
768:PGarxTLDXIkIqmAoAtz/nAxgitwrGYHMx:PZDXIkCtwrGOMx |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c3e53e3c34b48687 |
|
VISUAL
aHash
|
06607c6e6e0c0c38 |
|
VISUAL
dHash
|
84c8c8dcd8b8d8c1 |
|
VISUAL
wHash
|
42607e7e7e0e0e39 |
|
VISUAL
colorHash
|
38000000c40 |
|
VISUAL
cropResistant
|
84c8c8dcd8b8d8c1 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 35 techniques to evade detection by security scanners and make reverse engineering more difficult.