Name
The new campaign launch is done with a simple wizard.
At the first step you will give the campaign a name and will select the campaign type from one of the two options available:
- Email Only
- With Phishing Page
- Smishing
- With Attachment
Email Only
When this campaign type is selected, the system will send to the target only the simulated phishing email, monitoring opens and clicks, without taking them to a simulated phishing page asking their credentials.
With Phishing Page
When this option is selected, the system will send to the target the simulated phishing email and will setup the simulated landing page asking for credentials. The system will then monitor opens, clicks and submissions. Please note that no credentials are stored in any case.
Smishing
Smishing campaign will send SMS instead email message. The short text message will include a link that will redirect to Phishing Page, clicks and submits events will be recorded.
With Attachment
The phishing campaign will send users an email with a potentially harmful attachment. Note that the attachment will NOT actually harm the computer.
Completion Redirect Option
You can choose what happens after target click on mail link (if Email Only campaign) or submit data (if With Phishing Page campaign), available options are:
- No redirect - After target action, will be redirect to a blank page
- 404 Page Not found - After target action, a standard not found page will be shown
- Custom URL - After target action, will be redirect to a custom URL that must be part of a verified domain
- PhishBrain Landing Page - After target action, will be redirected to classic PhishBrain landing page with or without teachable moment
First two option allows you to prevent the spread of information between targets on running phishing awareness tests and custom URL; customURL enables more flexibility on customization and assuring targets about that this is a simulated attack using a more familiar page.
Teachable Moment
You get the option to include a teachable moment video to those users who are tricked by the simulated attack. If you select this option you can then choose which video to show.
List
The second step will ask you to define the target.
A list of the available targets, previously defined from the List menu, will be presented. You can also preview list members by clicking on the icon to the right.
An attention mark is show when one or more phone numbers are missing.
At the bottom of the grid you can (optionally) set the list Premise Alignment of the selected list for the campaign. Further details about this field are available at NIST Phish Scale page
Template
Select one and proceed to the next step, where you will be asked to select a Template.
Templates are organized into categories. You can also filter ranking (difficulty), language, public/private ones and NIST Scale Cues.
If you need a closer look to the email template or the landing page you can click on the magnifying glass icon.
You can select one or more templates to use in the campaign (in case of multiple templates, targets will receive a randomized template from selection).
Once done, click next and proceed to scheduling options.
Schedule
Schedule
You can launch the campaign manually after the creation wizard is completed or you can schedule it.
Sending
You can decide to send all email at once when the campaign starts or to schedule/divide all emails to be sent between the campaign start time and the selected period.
Duration
This defines for how long the system will keep on monitoring the campaign target actions, such as opens, clicks, submitted data. After this time the campaign will be set as completed and no more actions will be monitored.
Reschedule
You can automatically reschedule the campaign at a later time, if desired.
When clicking Next a summary page is presented.
Summary
From the summary page you can review all your settings and send a test email to verify the look and feel before launching the campaign to your target list.