Social manipulation
Attackers will always look for the easiest way into your system, and this way is often through your employees. By sending malicious emails, SMS or other messages, criminal actors can achieve a way into your systems. It is therefore essential for a company to have good routines and training in how to handle this type of social manipulation.
To measure the level of information security in a company, a real phishing attack can be simulated, where personalized emails are sent to targets in your company, and the number of clicks and logins are stored and analyzed. In this way, you can find out how resistant your company is to different types of targeted attacks. This provides information about which areas you should work on to improve your security culture.
Kristiansand Municipality experienced the nightmare when two stolen user accounts led to 5 million spam emails being sent across Norway. Read about their hard-won experience and why they chose to conduct a phishing exercise for all employees afterwards.
Our ethical hackers have conducted phishing exercises with a number of companies. Here are some of their tips on what you should pay attention to in order not to get scammed:
Our ethical hackers have conducted phishing exercises with a number of companies. Here are some of the points we cover in such an exercise:
More and more companies are conducting phishing drills on a regular basis to keep employees aware and updated on the threat situation.
Our security experts are happy to help you conduct a phishing exercise. Give us a call or get in touch using the form below, and we'll show you how to proceed.