Creating A Custom Phishing Template
Phishing simulation campaigns are essential tools for testing an organization's vulnerability to phishing attacks and for training employees to recognise phishing attempts. Follow the steps below to create your own custom phishing template.
Disclaimer: This guide is intended for creating simulated phishing campaigns for training purposes only. Unauthorized phishing attempts are illegal and unethical.
1. Launching Phishing Editor
Navigate To Phishing
First, Navigate to phishing
Custom Phishing Templates
In the Phishing Simulator, you will see a table showing the following tabs: The current phishing campaigns, Target Domains and the Custom Phishing templates.
Add A Campaign
To create a custom phishing template, click on the add button that can be found in the top right corner of the phishing simulator.
Using A Template
You will then have the option to start the custom phishing campaign from an existing template or from scratch. In this instance we will start from a template.
Choosing A Template
You will then have to choose the template that you would like to use.
Launch Editor
Once you have selected the template you would like to use, click the launch editor button that can be found in the bottom right corner of the template selection screen.
2. Email Phishing Editor
You will then be taken to the Email phishing Editor page. From here you can start editing the email.
Renaming The Template
Before you start to edit the template, we suggest that you re-name the template to prevent any changes to the original phishing template. To do this, navigate to the 'edit email options' that can be found in to the top right corner of the phishing email editor. Once the 'edit email options' has been selected, you will see a list of email editing options.
Go to 'Template name' . From here you can re-name the template. In this example, we have used Priya [Knowledgebase 2].
Save Template
Once you have re-named your template, we would suggest that you save your template. We would also suggest that you save the templates as you work through them to save any work being lost.
To save your template, navigate to the save icon that can be found within the Phishing Email Editor bar. Once you have found the save button, click to save.
Changing The Text
If you would like to change the text in the custom phishing email, double click the text you would like to change. You will then see a box appear that has the options to bold, italic and underline your text.
Changing An Image
After the image icon has been added to your template, you can then add an image. To do this, double click the image box. Select the photo you would like to upload by uploading your image file. Once the file has been uploaded, click add image.
Editing A Button
To start editing a button, double click the button you would like to edit. Once the text formatting box appears, you button is ready to edit.
3. Website Editor
To edit the website options, click the computer icon that can be found in the top right corner.
You have the option to edit the following:
- Page Title
- Website URL
You can also re-name your custom phishing template from here.
Edit Page Title
To edit the page title for the website, select the Page Title and change it to match your custom phishing campaign.
Website URl
You can edit the URL for the website you have chosen by clicking on the drop down menu.
4. Creating The Training
Highlight/ Edit Training
To highlight/edit the indicators or edit the training page after a user gets phished, click the Highlight/Edit training button that can be found in the top right hand corner of the email editor page.
Attack information
If you would like to change the information that the user sees once they have been phished, you can do this in attack information.
To make the attack information box bigger click and drag the small box that can be found in the bottom right corner of the description box.
To preview the information click Preview the on-the-spot training
Edit Indicator
To edit an indicator, select the indicator that you would like to edit. You can then change the indicator group and the training you would like to provide.
Edit Email Options
To edit the email options, click the mail icon that can be found in the top right corner.
You have the option to edit the following:
- Email Subject
- From Name
- Email Address.
You can also re-name your custom phishing template from here.
Edit Email Subject
To edit the email subject, select the subject box and the text.
Edit From Name
To edit the from name, select the from box and remove the existing text. Then add the text you would like.
Edit The Email Address
To edit the email address, select the email address box and change the email to suit your custom phishing template.
Edit Template Name
We recommend that you edit the template name. To do this, select the template name box and change it to match your custom phishing template theme.
5. Using The Template
Enjoyed using our product?
Help us out by leaving a review for on Gartner Peer Insights!
It only takes 5 minutes of your time and every review helps us immensely to reach new clients. Thank you so much.