22 lines
959 B
Markdown
22 lines
959 B
Markdown
# Dispersion Attack
|
|
|
|
```mermaid
|
|
sequenceDiagram
|
|
participant User
|
|
participant Threat Actor
|
|
participant nKode Server
|
|
Threat Actor ->> Threat Actor: Get User's email/keypad icons
|
|
Threat Actor ->> User: Send Phishing Email
|
|
Note left of User: Recieves Email:<br/>Subject: Urgent<br/>Body: Click the link to verify your account https://www.nkod3.tech
|
|
User ->> Threat Actor: Clicks link
|
|
Threat Actor -->> User: Fake nKode Login Page
|
|
Note left of User: Login Page<br/>{{nkode_keypad1}}
|
|
User ->>+ Threat Actor: key selection {{key_selection1}}
|
|
Threat Actor ->> Threat Actor: Disperse Keypad
|
|
Threat Actor -->>- User: Invalid nKode Try Again
|
|
Note left of User: Login Page<br/>{{nkode_keypad2}}
|
|
User ->> Threat Actor: key selection {{key_selection2}}
|
|
Threat Actor ->> Threat Actor: Deduce the user's nKode
|
|
Threat Actor ->> nKode Server: {{user_passcode}}
|
|
nKode Server -->> Threat Actor: Success
|
|
``` |