Phishing/Spear Phishing Simulation and Awareness Workshop

“Phishing” is the most widespread method for attackers to gain access to a company’s internal network. Attackers do this by sending emails in which they pretend to be a trustworthy entity. They use various social engineering manipulation techniques to trick their victims into revealing passwords or executing malware. This technique has been the number one attack vector for years, as various studies have shown.

NSIDE conducts phishing simulations for various-sized companies. Our experience confirms the studies and shows that phishing attacks may be especially successful against untrained personnel: In this context, it is not uncommon for 30% of attacked users to reveal their password. In an actual attack this can have serious consequences as attackers often only need a single set of credentials to gain access to internal systems and networks.

A phishing simulation tests the awareness of your employees and trains them in recognizing well-crafted phishing attacks in the follow-up if the campaign has been identified as such. Our years of experience in simulating phishing attacks have shown that an awareness campaign attracts much more attention and approval in the company if it is introduced to all employees by means of a phishing simulation. Cleverly linking the simulation with awareness measures means that the team discussions can be skillfully used to make employees aware of the contents and guidelines.

We also offer targeted spear-phishing attacks and correspondingly group-based analysis, which means that targets for the spear phishing campaign can be grouped, e.g., to map an internal organization (sales, accounting, logistics) or risk relevance (management, authorized for financial transactions, access to critical business data). This creates a detailed and realistic basis for further awareness measures.

If required, NSIDE ATTACK LOGIC GmbH also supports the training of employees. Our analysts can use an awareness workshop – whether on-site or as a webinar, recorded or live – to vividly demonstrate the relevant phishing techniques, their effects on the computer and how to successfully detect phishing – and not to forget: what to do if you pressed the wrong link after all.