page_1a.png page_1b.png page_2.png page_4.png page_5.png PHISHING ADMIN GUIDE

Transcription

1 page_1a.png page_1b.png page_2.png page_4.png page_5.png PHISHING ADMIN GUIDE 1

2 PHISHING RESOURCES 3 INTRODUCTION 3 GETTING STARTED 3 SETTING UP YOUR ACCOUNT 4 Adding Sub-Accounts 4 Adding Target Users 5 RUNNING YOUR FIRST PHISHING CAMPAIGN 7 Creating a New Campaign 7 Campaign Details 8 Data Entry Landing Pages 9 Editing Campaigns 10 Campaign Data and Reporting 11 2

3 Phishing Resources The Phishing Admin Guide will provide you with step-by-step instruction on creating and running a Phishing Campaign. You can access additional Support Documentation and register for a Demo & Training Session on our website at: For further assistance, you can contact our Support Team by ing support@securingthehuman.org. Introduction Securing The Human Phishing is a Software as a Service (SaaS) offering that enables an organization to run simulated infiltration and exfiltration exercises against their employees and network infrastructure. The goal of Securing The Human Phishing is to emulate real world attacks used to infiltrate networks, and then to identify methods that may be used to steal or exfiltrate data from the network. Getting Started Prior to starting your Phishing Campaign, we recommend the following: Review Whitelisting Requirements Attend a Phishing Demo & Training Session Links to this information as well as our Phishing Planning Kit can be found on our Resources website referenced above. Once you login to our Virtual Learning Environment (VLE), you will need to select the Phishing product from the "Manage Licenses" dropdown if you have a multi-product license. Image 1 3

4 Once you have selected the STH.Phishing product, you will see your Account Information and Phishing Dashboard. Image 2 The Help & Documentation tab within the Phishing Dashboard will provide you with additional Tutorial Videos for further assistance. This view will also provide you with anyone who has already been added to your Target List. Setting Up Your Account If you are a multi-product Client you may already have Sub-Accounts set up in the VLE. Users and Sub-Accounts are tied between products (i.e. A User can only be in one Sub-Account at a time*.) *Adding a User to a Phishing Sub-Account will update this as their new Sub-Account for all training they have been assigned (and may alter their other current training assignments). You can use the following the create Target User Groups for your Phishing Campaigns: All Target Users Sub-Accounts Departments (using Department field when adding Users) Adding Sub-Accounts You can add Sub-Accounts using the Manage Sub-Accounts page in the Account Management Section of the VLE (highlighted in Image2). Sub-Accounts can be utilized to group your Users together or to separate them into different pools for different target Phishing Campaigns. To add a new Sub-Account: Click on Add a sub-account Enter Account Name and add or select a Client Administrator Click on Add Account Click on Apply Changes to save your changes 4

5 Image 3 Prior to being able to add Users to these accounts you will need to ensure you have added enough Seat Licenses to the selected Sub-Account. Seats can be moved from a higher-level Sub-Account to your new Sub-Accounts you have set up. Once there are available seats in your Sub-Accounts you can then add your Users. Image 4 Adding Target Users Target Users are users who you can target with your Phishing Campaigns. To add users, click "Add Users" on the side menu or click the Add Users button in your Phishing Dashboard. If you have set up multiple Sub-Accounts, first select the Sub-Account that you want to add Users to before going to the Add Users page. This will allow you to specifically add your Users to that Sub-Account. Image 5 Once you are on the Add Users page, you have several options. You can add Users one at a time, or in bulk. To add bulk Users, download the provided CSV file template and fill it with any Users you wish to add to the system. 5

6 NOTE: You cannot alter the header row within the file and it needs to remain a CSV file in order to be uploaded successfully. Image 6 If you are a multi-product Client and have already added Users to your pre-existing Sub- Accounts with your previous CSV files. This will ensure that you do not move your Users unintentionally to a new Sub-Account. You can also utilize the Import Current Users tab (Image 7) within your Phishing Dashboard to add Users by Sub-Account that have been uploaded by you already. Image 7 Once you have added your Users you are ready to begin by clicking the Manage Phishing Campaigns button, which should now be available within your Phishing Dashboard. 6

7 Running your first Phishing Campaign There are several things you should consider before running your first phishing campaign: Who you going to target? What type of Phishing campaign do you want to run: o Drive-by phishing campaign (recommended initially) o Data entry phishing campaign Do you want to include Training or display an Error Page? Creating a New Campaign Once you have answered these questions, you are ready to start. Choose New Campaign from your Campaigns Drop-down Menu at the top of the screen. Image 8 Campaign Types You will now select which type of campaign you want to run: Drive-by phishing campaign: This campaign tries to get the target user to click on a link to a simulated malicious website. When the user clicks the link they are forwarded directly to SpearTraining, or silently fingerprinted and sent to an error page. Data entry phishing campaign: This campaign tries to get the target user to enter in their credentials or other information into a fake web site. Note: Passwords are NOT collected. Users are then sent to SpearTraining, or silently fingerprinted and sent to an error page. Image 9 7

8 Campaign Details There are many templates available to use to pre-populate much of the information needed to send out either a drive-by or data entry phishing campaign. When naming your campaign we recommend that you include enough information so that you can later review what type of campaign you ran and whom you targeted. Image 10 Once you have finalized your Campaign Details, you can now select which User Training Type you would want to utilize if your Target Users click on the link within your campaign. You have three options of User Training Types: 1. Standard Training Templates 2. Error Messages 3. Your Own Custom Training URL You can use the Preview button to view all of the templates that are available (or to Preview your Custom Page you have created). 8

9 Image 11 Once you have finalized all of your campaign settings you can now select your Lists, when to Schedule Campaign and when to End Data Collection. We typically recommend that you run your campaign for at least a week to optimize collection of responses. Image 12 After you have completed these settings, the Send Yourself Test button will allow you to see a sample for your phishing campaign. This is highly recommended to: Ensure that s can be successfully sent and that all necessary whitelisting has been completed (See Whitelisting Guide for more information) Review your Campaign Details and Training Page as they will display to your Target User Groups You can then save your campaign as a draft or by clicking on the Create Campaign button finalize your campaign. If you have not utilized the Schedule Campaign option your campaign will be started when you click on this button. Data Entry Landing Pages Within a data-entry phishing campaign, your Target Users will be prompted to enter information through the Landing Page that you choose when creating the campaign. You can choose to Clone (see Image 13) a site to display on this Landing Page or utilize one of the Landing Pages pre-set through the templates. Image 13 9

10 Once you have chosen your template (or cloned an alternate site) you will be able to preview this Landing Page before finalizing your campaign. Image 14 As noted previously, passwords are NOT collected during these campaigns. Targets Users who provide their information through these campaigns will be sent to the Training Page you have selected when creating your campaign. Editing Campaigns You can edit any of the existing templates, or create your own custom templates using the tools provided within the window (and html through the Source code). Any links included in the will be overwritten automatically to allow click tracking. Image 15 10

11 Campaign Data and Reporting Once you have created a campaign you will see the campaign details on your Campaign Overview. Image 16 Within each campaign in this view, you can use the icons on the left to perform the following functions: View Campaign Message Close Campaign Archive Campaign Edit Campaign By clicking on a specific campaign you can view and export your campaign statistics. You can use the Campaign Actions for the following view/edit functions: Edit Campaign Clone Campaign Archive Campaign Delete Campaign View Message Export Campaign Data to CSV Print Executive Summary Print Full Details For more detailed information on your campaign data and statistics see our Phishing Reporting Guide. 11