Spear Phishing : Schedule a Spear Phishing Simulation

Spear Phishing is the act of sending an email to a specific and well-researched target audience while pretending to be a trusted sender. A phishing email is sent to a large number of individuals with generic and no targeted information. Rather, a spear-phishing email is purposefully built by a threat with the hopes of penetrating an entire organisation. It is well researched with names, roles, trusted company names and branding to catch individuals out. If a single individual engages with a spear-phishing email, it can compromise the entire organisation. 

It is important to test your organisation using spear-phishing templates to ensure they are always thinking about cyber security and reporting malicious emails. 

This article will cover how to use the spear-phishing feature to send a specific template to a select user/s or group.

Schedule Spear Phishing via Learning Path

1. In your dashboard, go to Learning Paths > Timeline and select the drop-down arrow next to the New and select Spear Phishing.
2. Provide a name for the Spear Phishing campaign. 
   
3. Select an email template by using the search bar or Create New Email Template. You can filter templates by various filters like Attachment, Credential Capture and QR Code. 
   
4. Once you have chosen the template, click on it then select Yes, go ahead!
   
5. Select the learners you would like to enroll. 

   1. Smart Group

       Information : This is the recommended approach to ensure any changes to the synched learners during the duration of the Spear Phishing block are enrolled.

       

      

   2. Individual Target

       Information

      • If a learner has a red dot next to their name, they are already scheduled for a block (training or phishing) in the system and are using a licence. Selecting them again will not use an additional licence.
      • Choose from the filter options as preferred if the plan is to roll Spear Phishing to selected employees only. 

       

      

6. Click .
7. Fill out all the required fields under Create Schedule.
8. Click .
9. Click .

Schedule Spear Phishing via Email Templates

1. Navigate to Email Templates and filter per screenshot below.
2. Once you have chosen the Email Template to use, click on the 3 dots > View.
   
3. Click .
4. Follow through per screenshot below,
5. Select the learners you would like to enroll. 

   1. Smart Group

       Information : This is the recommended approach to ensure any changes to the synched learners during the duration of the Spear Phishing block are enrolled.

       

      

   2. Individual Target

       Information

      • If a learner has a red dot next to their name, they are already scheduled for a block (training or phishing) in the system and are already using a licence. Selecting them again will not use an additional licence.
      • Choose from the filter options as preferred if the plan is to roll the Spear Phishing to selected employees only. 

       

      

6. Click .
7. Fill out all the required fields under Create Schedule.
8. Click .
9. Click .

Download a CSV of the Spear Phishing details

1. Select the Spear Phishing block you're looking to download and click button. 

2. The downloaded file is the CSV version of the details of the selected Spear Phishing block. 

   Note : If the file is too large, a pop up message will appear at the bottom of the screen and you will see below image under Notification bell once download is complete. 
   

Video tutorial : Spear Phishing