BenjaminN

I had this exact same attack in my previous company, and it spread quite rapidly.

Thanks!

The pricing is a work in progress.

Damn!

Sure! Pricing is actually very hard to set up.

1. I've talked with a lot of companies (Stripe for example) who do that internally and it takes a tremendous amount of time to set up.

2. For now attacks are very generic, but will soon be sector-based and department-based.

3. Yes for sure it's probably worth adapting the pace of the attacks depending on the level of the employees.

Thanks for the kind words!

Most of them target big companies. It makes a very different product.

I have a fun story with Wombat: I tried to use the product in my previous company (100 employees), had 4 different calls, with 4 different sales persons, during 2 months. At the end they just forgot about me.

Thanks!

1. Import the list of your employees.

2. Whitelist the IP address we use to send the emails.

3. Activate the "phishing simulation" module.

4. Wait and see.

Takes 5 minutes.

I tried Knowbe4, I think it's a horrible product.

I heard once you try the "free service" they call you daily to sign you up for the paid plan.

Depending on your email provider (most of the time it's Google), you need to whitelist the IP address I use to send the emails. It takes probably no more than 4 minutes to do.

I actually started coding in 2000 trying to hack my brother, so I can relate: phishing has been a never-ending story.

It's still worth trying though!

Some people know League of Legends, most don't know Riot Games. And I double checked: Riot Games don't own a trademark for anything related to cybersecurity.

1. There's an option to hide the names of the employees. It would replace all the names with random animal name + a color. It's great if you don't want to know which employees are falling for attacks.

2. I love the idea to actually make the employees create their own attacks, but seems a bit hard to do and pretty much time consuming for a company.

Definitely bad timing. My experience with names: they are never good enough.

What I look for in a name:

1. If I say it out loud, you know how to write it.

2. If I say it out loud today, you remember it tomorrow.

On that 2 criteria, Riot works quite well I think.