This article will analyze the typical methods of phishing attack groups such as Inferno Drainer and Nova Drainer, and list their behavioral characteristics in detail. It is hoped that these analyses will help users improve their ability to identify and prevent phishing scams.