Detailed analysis of captured phishing page
Used to detect similar phishing pages based on HTML content
| Algorithm | Hash Value |
|---|---|
|
CONTENT
TLSH
|
T18302B517A241333505C70365AE0743DBF736C0EC73252B9639BE815C36996D8CABB9DA |
|
CONTENT
ssdeep
|
192:8ZwpnY2sr8mMWAfGu6jD7nD80e/dLcl6rLSMSB4j1ApOFD:8ZynEJ3xuODb7e/dAlcmmBApOFD |
Used to detect visually similar phishing pages based on screenshots
| Algorithm | Hash Value |
|---|---|
|
VISUAL
pHash
|
cf713138396c9a6c |
|
VISUAL
aHash
|
383c3c3c3c3c303c |
|
VISUAL
dHash
|
6169616161616161 |
|
VISUAL
wHash
|
3c3c3c3c3c3c3c3c |
|
VISUAL
colorHash
|
38007000000 |
|
VISUAL
cropResistant
|
6169616161616161 |
Victim enters username and password into fake login form. Credentials are captured via JavaScript and exfiltrated to attacker's server in real-time.
Victim enters banking credentials including account numbers and security questions. Attacker gains full access to victim's banking services.