31–40 of 70 posts
I often intentionally click links to phishing sites, and sometimes enter in fake usernames and passwords. (I even wrote several bots to auto enter thousands of random usernames and passwords.) I don't like the click link = you lose idea.
Love it! My recommendation would be to offer an option for allowing the target to be tricked through the whole process. (Even if credentials are discarded completely.) The idea here is nothing is left to the imagination. What you have is great, but it requires them to read and be observant, which is not the type of person who falls for phishing emails. Clicking the link is "No-No" #1, don't exclude "No-No" #2 from yo…
Thanks and thanks for the suggestion! One thought I'd had was longer/more in depth campaigns. It's good to know other people would be interested in that as well. One thing I was concerned about was that people might not trust some random guy on the internet to properly discard those credentials.
You should send the emails, and charge me to view the report.
One other thing I thought about was maybe making the service free for phishing up to N people.
Not saying they would, but they could get hacked of course...
Earlier quoted context omitted.
Thanks and thanks for the suggestion! One thought I'd had was longer/more in depth campaigns. It's good to know other people would be interested in that as well. One thing I was concerned about was that people might not trust some random guy on the internet to properly discard those credentials.
One option that might do something to ensure trust would be to have the javascript on the page that accepts the credentials be unminified and readable.
Hm. I often click on obviously phishing links to see what's there. Would this tool classify me as a victim?
You should send the emails, and charge me to view the report.
Are you hiring?