Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T1900284618640BE2B51C38192EA30EB5FB740C3418387176956F9C39DBEC6DE4CE27AC9 |
|
CONTENT
ssdeep
|
96:TOKAhOiqdhiGhWLPzzvX/qu5rgh1j3e5jybiZ4e7UnvA17UKQo0AGfFvNXSjxNNv:fp+XLP3vXfryIj1aAOrXSjxNNgDwzt |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
c7758a65681732dc |
|
VISUAL
aHash
|
20303c3038203c3d |
|
VISUAL
dHash
|
4840656062486061 |
|
VISUAL
wHash
|
3c383c3c383c3c3d |
|
VISUAL
colorHash
|
38007000000 |
|
VISUAL
cropResistant
|
4840656062486061 |
Victim is prompted for 2FA code after entering credentials. The code is intercepted and used by attacker to access victim's account in real-time.
Malicious code is obfuscated using 3 techniques to evade detection by security scanners and make reverse engineering more difficult.