Phishing Campaign Service

Very often, successful cyber-attacks are initiated via an email service (phishing attacks) by someone who is careless or has poor cyber hygiene skills. If there was no person, there would be no problem, but who would do the work?
There are a number of ways to prevent such cyber incidents. It is important to invest in the best cyber defence technology and to train employees to recognise cyber vulnerabilities. Even if the technologies are in place and people have a good level of cyber hygiene awareness at a theoretical level, this may not be enough in practice. Deterrence campaigns have become better and more dangerous over time, and cyber incidents require constant training on top of everything else.

Who is it for?

Phishing Campaign Service is the next level of cyber hygiene for corporate employees, which is a necessity for every company. While traditional cyber hygiene training is good theory, mimicking phishing attacks as a service is like hands-on training that takes employee cyber hygiene awareness to the next level.

What problems or needs does it solve?

We create battlefield situations in the company, or mimic real-life fishing expeditions, tailored to the nature of the company and business specifics. This provides an opportunity to assess the awareness and alertness of employees, and thereby identify weak links to further educate (either on an individual level or through wider training) and thereby mitigate the risk of a cyber incident. Training will be more effective if done regularly 3-4 times a year.

Our experience

We have carried out a number of fishing expeditions for both larger and smaller Estonian private and public sector companies. Based on previous experience, we can say that the number of victims after the first attack is high (52% on average). However, if employees are trained in the meantime and attacks are repeated regularly, the number of victims decreases significantly over time.