Creating A Custom Phishing Template

Phishing simulation campaigns are essential tools for testing an organization's vulnerability to phishing attacks and for training employees to recognise phishing attempts. Follow the steps below to create your own custom phishing template.

Disclaimer: This guide is intended for creating simulated phishing campaigns for training purposes only. Unauthorized phishing attempts are illegal and unethical.

1. Launching Phishing Editor

Navigate To Phishing

First, Navigate to phishing

Custom Phishing Templates

In the Phishing Simulator, you will see a table showing the following tabs: The current phishing campaigns, Target Domains and the Custom Phishing templates.

Add A Campaign

To create a custom phishing template, click on the add button that can be found in the top right corner of the phishing simulator.

Using A Template

You will then have the option to start the custom phishing campaign from an existing template or from scratch. In this instance we will start from a template.

Choosing A Template

You will then have to choose the template that you would like to use.

Launch Editor

Once you have selected the template you would like to use, click the launch editor button that can be found in the bottom right corner of the template selection screen.

2. Email Phishing Editor

You will then be taken to the Email phishing Editor page. From here you can start editing the email.

Renaming The Template

Before you start to edit the template, we suggest that you re-name the template to prevent any changes to the original phishing template. To do this, navigate to the 'edit email options' that can be found in to the top right corner of the phishing email editor. Once the 'edit email options' has been selected, you will see a list of email editing options.

Go to 'Template name' . From here you can re-name the template. In this example, we have used Priya [Knowledgebase 2].

Save Template

Once you have re-named your template, we would suggest that you save your template. We would also suggest that you save the templates as you work through them to save any work being lost.

To save your template, navigate to the save icon that can be found within the Phishing Email Editor bar. Once you have found the save button, click to save.

Changing The Text

If you would like to change the text in the custom phishing email, double click the text you would like to change. You will then see a box appear that has the options to bold, italic and underline your text.

Changing An Image

After the image icon has been added to your template, you can then add an image. To do this, double click the image box. Select the photo you would like to upload by uploading your image file. Once the file has been uploaded, click add image.

Editing A Button

To start editing a button, double click the button you would like to edit. Once the text formatting box appears, you button is ready to edit.

3. Website Editor

To edit the website options, click the computer icon that can be found in the top right corner.

You have the option to edit the following:

• Page Title
• Website URL

You can also re-name your custom phishing template from here.

Edit Page Title

To edit the page title for the website, select the Page Title and change it to match your custom phishing campaign.

Website URl

You can edit the URL for the website you have chosen by clicking on the drop down menu.

4. Creating The Training

Highlight/ Edit Training

To highlight/edit the indicators or edit the training page after a user gets phished, click the Highlight/Edit training button that can be found in the top right hand corner of the email editor page.

Attack information

If you would like to change the information that the user sees once they have been phished, you can do this in attack information.

To make the attack information box bigger click and drag the small box that can be found in the bottom right corner of the description box.

To preview the information click Preview the on-the-spot training

Edit Indicator

To edit an indicator, select the indicator that you would like to edit. You can then change the indicator group and the training you would like to provide.

Edit Email Options

To edit the email options, click the mail icon that can be found in the top right corner.

You have the option to edit the following:

• Email Subject
• From Name
• Email Address.

You can also re-name your custom phishing template from here.

Edit Email Subject

To edit the email subject, select the subject box and the text.

Edit From Name

To edit the from name, select the from box and remove the existing text. Then add the text you would like.

Edit The Email Address

To edit the email address, select the email address box and change the email to suit your custom phishing template.

Edit Template Name

We recommend that you edit the template name. To do this, select the template name box and change it to match your custom phishing template theme.

5. Using The Template