Skip to content
English
  • There are no suggestions because the search field is empty.

Getting Started: Smishing Simulator

The Smishing Simulator allows you to create realistic simulated smishing SMS messages sent to employees to assess their ability to recognize suspicious SMS messages and their response to attacks that could compromise organizational data and systems.

- Technical Considerations
- Smishing Scenarios
- How to Add a New Smishing Scenario
- How to Edit a Smishing Scenario
- How to Preview a Smishing Scenario
- How to Delete a Smishing Scenario
- Text Message Templates
- How to Edit a Text Message Template
- How to Preview a Text Message Template
- How to Clone a Text Message Template
- How to Delete a Text Message Template
- Utilizing Merge Tags in your Text Template
- Landing Page Templates
- How to Create a New Landing Page Template
- How to Edit a Landing Page Template
- How to Preview a Landing Page Template
  - How to Clone a Landing Page Template
- How to Delete a Landing Page Template
- Utilizing Merge Tags in a Landing Page Template
- Next Steps

 

Technical Considerations

In order for phone-based method simulations to be successful, it is essential that the phone number of the target users is provisioned. Without this attribute, the campaign will fail immediately. Note the disclaimer when creating a campaign where phone numbers are absent:

To learn more about how to add target users to the phishing platform with specific attributes, please refer to this comprehensive guide.

In addition, please allow messages to be received from our simulation phone numbers found here.

ℹ️ If you opt to provision users in our Phishing Tool separate from our Training Platform AND you are provisioning the phone number attribute for smishing simulations, you will no longer have the ability to sync audiences from Training to Phishing as it causes a conflict.

ℹ️ To maximize delivery success please visit our article Considerations for a Successful Smishing Campaign.


   
The Smishing Simulator > Scenarios page provides a selection of ready-to-use smishing campaigns. These standard system scenarios are available to all clients and can be launched with just a few clicks. You also have the option to customize a scenario to your needs or to create a unique smishing campaign.
The components of the Scenarios page are explained below:
Scenario name
The name of the smishing template
Method
The smishing technique employed.
 
Data Submit = Used to detect target users who submit data on the landing page
MFA = Used to detect target users who entered MFA credentials
Click-Only = Used to detect target users who click unknown links in the smishing email
Tags
Tags can be added to the smishing scenario to enable viewing using related tag lists.
Difficulty
The level of difficulty to recognize a smishing attempt
(Easy, Moderate, Difficult)
Created By
System: Standard smishing scenario templates provided with the module.
Custom: Smishing scenarios created or customized by system users.
Date Created
The date and time the smishing scenario was created.
       

Smishing Scenario Actions

How to Add a New Smishing Scenario

Smishing scenarios consist of two components: the smishing email template and the landing page. Follow the steps below to add a new smishing scenario:
  1. Click the +NEW button in the upper right corner of the Smishing Simulator > Scenarios page.
  2. Complete the required fields on the first page, then click Next.
  3. On the Text Message Template page, select the sms template you want to use or customize it as explained below, then click the Next button.
  4. Select the Landing Page template you want to use or customize it as explained below, and click the Next button to move on to the Summary page.
  5. The Summary page provides you with an overview of the proposed smishing campaign, including the type of campaign, the targeted users, and other important details.
       

How to Edit a Smishing Scenario

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Edit button.
       

How to Preview a Smishing Scenario

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Duplicate button to recreate a previous campaign.
       

How to Delete a Smishing Scenario

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Delete button to delete a smishing scenario.

Text Message Templates

The Smishing Simulator > Scenarios > Text Message Templates page provides you with system default smishing text templates. You can use them as they are or customize them as needed for your smishing campaign.
The components of the Text Message Templates page are explained below:
Template name
Name of the email template
Method
The smishing technique employed
 
Data Submit = Used to detect target users who submit data on the landing page
MFA = Used to detect target users who entered MFA credentials
Click-Only = Used to detect target users who click unknown links in the smishing text
Tags
Tags can be added to the email template to enable viewing using related tag lists.
Difficulty
The level of difficulty to recognize a smishing attempt.
(Easy, Moderate, Difficult)
Created By
System: Standard smishing templates are provided with the module.
Custom: smishing text created or customized by users.
Date Created
The date and time the email template was created
      

Text Message Template Actions

This section explains how to create, edit, preview, clone, or delete a text message email template.
      

How to Create a Text Message Template

Follow the steps below to create a new text template for use in a new or existing smishing campaign:
  1. Click the +New button in the upper right corner of the Smishing Simulator > Smishing Scenarios > Template Info page.
  2. Complete the required fields on the first page, then click Next.
  3. Write the text message for your template on the Text Message Settings page. Note: Use the merge tag {PHISHINGURL} for the link to be added to the text message
  4. Click Save to complete the process.
      

How to Edit a Text Message Template

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Edit button.
      

How to Preview a Text Message Template

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Preview button.
      

How to Clone a Text Message Template

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Duplicate button.
      

How to Delete a Text Message Template

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Delete button.
      

Utilizing Merge Tags in Text Message Templates

To make your SMS text message template more personalized, you can use merge tags. These merge tags allow you to tailor your smishing campaign to the recipient, making it more engaging and relevant to them. By adding these tags, you can create a more targeted and effective campaign.
 
Merge Tag
Description
Full Name
Inserts the target user's first and last name.
First Name
Inserts the target user's first name.
Last Name
Inserts the target user's last name.
Phishing URL
Inserts a phishing simulation URL for the recipient to click and view the landing page.
Company Name
Displays your organization's name, sourced from the company profile.
Date Sent
Inserts the date when the campaign is launched.
Current Date
Inserts the current date when the campaign is launched.
Current Date Plus 10 Days
Inserts a date that is 10 days after the campaign's launch date.
Current Date Minus 10 Days
Inserts a date that is 10 days before the campaign's launch date.
Random Number One Digit
Generates and inserts a random one-digit number.
Random Number Two Digit
Generates and inserts a random two-digit number.
Random Number Three Digit
Generates and inserts a random three-digit number.

      

Landing Page Templates

Landing pages serve as a way to guide users to a specific webpage and can be utilized for various objectives, including redirecting users to informative content or prompting them to provide credentials.
The Smishing Simulator > Scenarios > Landing Page Templates page contains standard default landing pages you can select and use for your smishing scenario or customize according to your preferences. You also have the option to create an entirely new landing page.
The components of the Landing Page Templates page are explained below.
Template name
The name of the smishing template
Category
The smishing technique employed
Data Submit: Used to detect recipients who submit data on the landing page
MFA: Used to detect target users who entered MFA credentials
Click-Only: Used to detect recipients who click unknown links in the smishing email
Tags
Tags can be added to the landing page to enable viewing using related tag lists.
Difficulty
The level of difficulty to recognize a smishing attempt.
(Easy, Moderate, Difficult)
Created By
System: Standard landing page templates provided with the module.
Custom: Landing pages created or customized by users.
Date Created
The date and time the landing page was created.

Landing Page Templates Actions

This section explains how to create, edit, preview, clone, or delete a landing page.
      

How to Create a New Landing Page Template

Follow the steps below to add a new landing page that you can use in a new or existing smishing scenario:
  1. Click the +New button in the upper right corner of the Smishing Simulator > Scenarios > Landing Page Templates page.
  2. Complete the required fields on the first page, then click Next.
  3. On the Page Settings page, provide the smishing link: the URL to be used in the smishing SMS messages.
 
Click Edit to make any changes or Save to complete the process.
      

How to Edit a Landing Page Template

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Edit button.
      

How to Preview a Landing Page

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Preview button.
      

How to Clone a Landing Page

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Duplicate button.
      

How to Delete a Landing Page

Click on the three dots '⋮' button in the Actions option on the far right of the relevant page, and then click the Delete button.
    

Utilizing Merge Tags in Landing Page Templates

Here's a list of merge tags to help you make your landing pages more personal. Adding these tags can make your phishing campaign more tailored to the recipient.
 
Merge Tag
Description
Full Name
Inserts the target user's first and last name.
First Name
Inserts the target user's first name.
Last Name
Inserts the target user's last name.
Company Name
Displays your organization's name, sourced from the company profile.
Date Sent
Inserts the date when the campaign is launched.
Current Date
Inserts the current date when the campaign is launched.
Current Date Plus 10 Days
Inserts a date that is 10 days after the campaign's launch date.
Current Date Minus 10 Days
Inserts a date that is 10 days before the campaign's launch date.
Random Number One Digit
Generates and inserts a random one-digit number.
Random Number Two Digit
Generates and inserts a random two-digit number.
Random Number Three Digit
Generates and inserts a random three-digit number.

Next Steps

Smishing Campaign Manager