Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1F622B6B0D140952B9323C3D1A46B7B1E3383929EDE4341044BFAC7E95EEBD6C9C1827A |
|
CONTENT
ssdeep
|
192:x6xCGzKZfdOsT3d8ZNLbGb9/9j9lYTJTgkcRfz+60cQg5ZS3:vGcTANXGZVBlYTaRfz+AM3 |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
9b9b33a4648e938e |
|
VISUAL
aHash
|
ff3c3c3c30000000 |
|
VISUAL
dHash
|
6079797062080102 |
|
VISUAL
wHash
|
ffff3c3c381c0c00 |
|
VISUAL
colorHash
|
070000001c0 |
|
VISUAL
cropResistant
|
6079797062082102 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Malicious code is obfuscated using 2 techniques to evade detection by security scanners and make reverse engineering more difficult.
| ID | Português | Inglês | Trigger |
|---|---|---|---|