Phishing Analysis Tool

Description The Phishing Analysis tool can perform lookups on domains, whois, and attempt to obtain the phishing domain compressed files, import the file and begin an analysis of the suspect files. This includes, hashes, additional e-mail addresses and other tell-tale signs that the attacker may be doing crypto-mining, or performing other types of attacks on the compromised locations. What used to take analysts 10 - 15 minutes can now be done in approximately 2 minutes. The tool supports gathering evidence, extracting information and pulling EXIF information from the files obtained. In addition to which, if the environment needs to scan their own servers the tool can also dump scripts for Linux to search for affected files that were used in the current campaign.