The worst of all deceptions is self-deception
Goal: Deceptive Phishing Email with Delayed Delivery
Approach: This element involves sending a deceptive phishing email to employees that appears to be legitimate but is intentionally delayed in delivery.
Attackers who open or interact with the delayed email will be identified and their actions will be logged. This information can be used to improve defenses and make it more difficult for attackers to phish employees.
Goal: Identify susceptible individuals and gather information about ongoing phishing campaigns.
Approach: Launching controlled phishing campaigns with deceptive lures.
Conduct internal phishing campaigns with fake but believable phishing emails. Track who clicks on links, downloads attachments, or provides sensitive information. This reveals vulnerable individuals and gathers intelligence about attacker tactics.