The attack landscape is evolving, and attackers are employing new techniques to launch increasingly targeted and sophisticated social engineering attacks that exploit human vulnerabilities. Many organizations provide their employees with security awareness training to counter and mitigate such threats. However, recent studies have shown that current embedded phishing training programs and tools are often ineffective or incapable of addressing modern, tailored social engineering attacks. This paper presents a toolkit for the deployment of sophisticated, tailored phishing campaigns at scale (e.g., to deploy specific training within an organization). We enable the use of highly customizable phishing email templates that can be instantiated with a large range of information about the specific target and a semi-automated process for the selection of the phishing domain name. We demonstrate our tool by showing how tailored phishing campaigns proposed in previous studies can be enhanced to increase the credibility of the phishing email, effectively addressing the very limitations identified in those studies.
|Title of host publication||Information Systems Security - 16th International Conference, ICISS 2020, Proceedings|
|Editors||Salil Kanhere, Vishwas T Patil, Shamik Sural, Manoj S Gaur|
|Number of pages||23|
|Publication status||Published - 2020|
|Event||16th International Conference on Information Systems Security, ICISS 2020 - Jammu, India|
Duration: 16 Dec 2020 → 20 Dec 2020
|Name||Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)|
|Conference||16th International Conference on Information Systems Security, ICISS 2020|
|Period||16/12/20 → 20/12/20|
FingerprintDive into the research topics of 'A Toolkit for Security Awareness Training Against Targeted Phishing'. Together they form a unique fingerprint.
Pirocca, Simone (Recipient), Allodi, Luca (Recipient) & Zannone, Nicola (Recipient), 2020
Prize: Other › Career, activity or publication related prizes (lifetime, best paper, poster etc.) › Scientific