It's a Beautiful Day for Phishing

IRJ

I was talking with my boss and I recommended that I try to fool our employees weekly with phishing emails. I would like to send out a report the following day of how we did as a company.

It sounds like a good plan, but I don't have a way to execute on it at the moment. What do you guys use for that type of testing?

scottalanmiller

Never tried this myself, have had outside services do this. Will be interested to see what people come up with.

IRJ

I am looking for something like this, but this solution has no pricing information which is scary.

https://www.wombatsecurity.com/suggested-programs/anti-phishing?source=adword_searchnetwork&campaignid=199802594&adgroupid=12416355194&creative=101330686994&keyword=phishing testing&device=c&placement=&target=&network=g&adposition=1t4&loc_physical_ms=9011838&utm_source=adwords&utm_medium=cpc&utm_campaign=phishing#

BRRABill

I've spoken with these guys. Always wanted to use them.

https://www.knowbe4.com/

coliver

@BRRABill said in It's a Beautiful Day for Phishing:

I've spoken with these guys. Always wanted to use them.

https://www.knowbe4.com/

We use them. They work really well.

IRJ

I would like to do the testing myself.

BRRABill

@coliver said in It's a Beautiful Day for Phishing:

@BRRABill said in It's a Beautiful Day for Phishing:

I've spoken with these guys. Always wanted to use them.

https://www.knowbe4.com/

We use them. They work really well.

When I got a quote they were pretty inexpensive, as well.

travisdh1

@IRJ said in It's a Beautiful Day for Phishing:

I would like to do the testing myself.

So make yourself a few email templates and be sure to use an email address on a different domain, but remains in the companies control. knowbe4 does a good job, I don't use their service, but I've done their free phishing test. The paid product looks really good, and I was ready to go to the owners with our results, but out of everyone here, only one of the owners actually clicked a link, and they were the one I got permission to do the phishing test from bother.

scottalanmiller

Tagging @stus