Phishing campaign

We implemented a phishing campaign for the company to test the vigilance of employees. The CEO’s private phone number was successfully spoofed and many employees ran the attached exe file. The campaign ended up being a success for the attackers also due to the fact that the incident was reported by a very small group of users.

Details

We use a customized opensource tool Gophish for campaign management. We devise phishing sites with the client’s realities in mind, just as an attacker would. We also prepare customized phishing sites for the client. This allows us to achieve high success rates even in environments where phishing attacks, or employee training, has already taken place.