Yes. We’ve generated dozens of templates for our phishing sim using ChatGPT.
“I’m training my staff on the dangers of phishing attacks. I want to give them an example of a phishing email that poses as the CEO of my company. Can you write me an example using improper grammar and other tell tale signs of a phishing attack?”
Here’s how it responded:
“ Sure, here's an example:
---
Subject: Urgnt action requir3d: Conffidential Information
Dear All,
I'm writing you as CEO of our great company, with urrgent attention required. Due to sudden development we face, there is an immediate needs to you all.
I need you immediately send your login IDs and passswords to IT Department for ur security verifications. Our email is ITdepartment@yaho.com
This is urrgrnt and very confidential matter, so no discssion to anyone. We fight against the tough times.
Pls respond immediately. Your quick actions are required in the next 30 minutes.
Yours,
[CEO's name]
---
While this is a fictitious example, it includes a number of tell-tale signs of phishing:
1. Urgency: The email creates a sense of urgency, hoping that the recipient will act quickly without thinking.
2. Spelling and grammar mistakes: Phishing emails often contain mistakes that professional, legitimate emails wouldn't.
3. Request for sensitive information: Legitimate organizations will never ask for sensitive information like passwords via email.
4. Unofficial email: The email address of the so-called IT Department doesn't appear to belong to the organization.
5. Confidentiality: The email requests that the information isn't discussed with anyone else. This is to prevent the recipient from seeking advice and discovering the scam.”