Time saving templates
Use one of our proven and time-saving phishing templates to fuel your awareness program.
Almost all attacks against your organization start with a phishing attack. Professional cyber criminals and state actors abuse your users’ trust and get them to click links, download malicious code or provide credentials to your systems and networks. Even though 78% of users claim to recognize phishing attempts they click on the links anyway. With 60,000 new phishing websites created every month, you need to provide training to your employees. With our phishing solution and ready-to-go templates, you will be able to train your colleagues and build resilience against real phishing attacks.
Network breaches start with spear phishing
User click links in a phishing email
New phishing websites per month
Data breaches originated from phishing
Most people think of social engineering as something they will never experience, leading them to believe that information security is still a long way off. By simulating a phishing attack, you offer your colleagues the chance to become the target of a real attack in a safe environment. Going through a simulation improves their attitude to information security. Running phishing simulations on a regular basis keeps your colleagues vigilant and reduces the likelihood that a real attack will succeed.
According to research, 95% of all network breaches start with a (spear) phishing email. As one of the first steps in the Cyber Kill Chain, email is used to deliver a malicious payload that gives attackers backdoor access to your organization’s infrastructure. Make life difficult for cyber criminals and train people to stop and think before acting on an email.
Email is still the most effective method to deliver malicious payload and trick people into visiting a website controlled by an attacker. Cyber criminals use phishing to deliver ransomware to your organization. Since not all ransomware can be detected by anti-malware software and firewalls, your best defense is to ensure that employees do not click on links or install software.
Create a spear phishing attack targeting a few selected targets in your organization, just like a real attacker would. Send an ‘invoice report’ to your finance department, email a link to an ‘online resume’ to an HR officer, or leave a USB stick with a competitor’s name with your sales colleagues to test their vigilance.
Our simulated phishing attacks are used by small and large organizations to train employees. Our customers include organizations in government, education and schools, production and distribution, finance and insurance, and more. Some of the features they appreciate most are listed below.
Use one of our proven and time-saving phishing templates to fuel your awareness program.
Deliver your campaign using email, SMS text messages, USB keys, QR codes or Word documents.
Build and execute phishing campaigns in unlimited languages. Use different languages for different users.
Have colleagues in your awareness team review or approve the phishing campaign with our preview function.
Use drag & drop or HTML in our advanced editors to build a custom campaign that is fully geared towards your targets.
Monitor the phishing results in real time with our easy to understand dashboards. Share access to the dashboards with stakeholders.
Cybercriminals use different tactics to delivery the phishing content. This is usually an email with a link to a phishing website. Other methods such as SMS text messages with a link are gaining traction too, especially when targeting smartphones. Victims are persuaded to click a link which sends them to a phishing website that mimics a login page, questionnaire or download page. The goal is often to steal credentials or personal data, simply by asking employees. The credentials are then used to gain access to your corporate network or information. In some cases, attackers ask the user to install ransomware disguised as legitimate software. The software encrypts all of your data, after which the attacker demands for a payment to return access to you.
Even though this used to be the case in the past, recent phishing attacks are much more sophisticated. The emails are good copies of authentic messages and they are harder to spot. This is why it is impossible to prevent everyone from clicking phishing links all the time. It is very important to train people to recognize a suspicious combination of an email and website, and stop before they fill out sensitive information.
Depending on the current security posture of your organization, you can expect 30% of people to fall for a phishing scheme on average. But we have seen numbers as high as 60%. You can expect the percentage of victims to go down after every phishing simulation. You can slowly increase the complexity of your campaigns.
All phishing data is processed by Awareness Platform and stored in Microsoft Azure data centers in Europe. Because forms on our phishing websites are only used to increase the credibility of the phishing websites, any data that users will not be processed. We provide validation rules for some fields to mimic real applications, but we do not check or validate the data that is submitted.
We have registered a large number of internet domains for phishing, and we register more from time to time. We offer domains for both international and national top level domains. For each phishing campaign, you can choose from relevant domain names.
We recommend running a phishing campaign every three months to keep your colleagues’ attention on this important attack method. Most people need a new boost after 2 to 3 months to reinforce safe behavior.
