Getting Started: Smishing Simulator
The Smishing Simulator allows you to create realistic simulated smishing SMS messages sent to employees to assess their ability to recognize suspicious SMS messages and their response to attacks that could compromise organizational data and systems.
- Technical Considerations
- Smishing Scenarios
- How to Add a New Smishing Scenario
- How to Edit a Smishing Scenario
- How to Preview a Smishing Scenario
- How to Delete a Smishing Scenario
- Text Message Templates
- How to Edit a Text Message Template
- How to Preview a Text Message Template
- How to Clone a Text Message Template
- How to Delete a Text Message Template
- Utilizing Merge Tags in your Text Template
- Landing Page Templates
- How to Create a New Landing Page Template
- How to Edit a Landing Page Template
- How to Preview a Landing Page Template
- How to Clone a Landing Page Template
- How to Delete a Landing Page Template
- Utilizing Merge Tags in a Landing Page Template
- Next Steps
Technical Considerations
In order for phone-based method simulations to be successful, it is essential that the phone number of the target users is provisioned. Without this attribute, the campaign will fail immediately. Note the disclaimer when creating a campaign where phone numbers are absent:
To learn more about how to add target users to the phishing platform with specific attributes, please refer to this comprehensive guide.
In addition, please allow messages to be received from our simulation phone numbers found here.
ℹ️ If you opt to provision users in our Phishing Tool separate from our Training Platform AND you are provisioning the phone number attribute for smishing simulations, you will no longer have the ability to sync audiences from Training to Phishing as it causes a conflict.
ℹ️ To maximize delivery success please visit our article Considerations for a Successful Smishing Campaign.
Scenario name
|
The name of the smishing template
|
Method
|
The smishing technique employed.
Data Submit = Used to detect target users who submit data on the landing page
MFA = Used to detect target users who entered MFA credentials
Click-Only = Used to detect target users who click unknown links in the smishing email
|
Tags
|
Tags can be added to the smishing scenario to enable viewing using related tag lists.
|
Difficulty
|
The level of difficulty to recognize a smishing attempt
(Easy, Moderate, Difficult)
|
Created By
|
System: Standard smishing scenario templates provided with the module.
Custom: Smishing scenarios created or customized by system users.
|
Date Created
|
The date and time the smishing scenario was created.
|
Smishing Scenario Actions
How to Add a New Smishing Scenario
- Click the +NEW button in the upper right corner of the Smishing Simulator > Scenarios page.
- Complete the required fields on the first page, then click Next.
- On the Text Message Template page, select the sms template you want to use or customize it as explained below, then click the Next button.
- Select the Landing Page template you want to use or customize it as explained below, and click the Next button to move on to the Summary page.
- The Summary page provides you with an overview of the proposed smishing campaign, including the type of campaign, the targeted users, and other important details.
Text Message Templates
Template name
|
Name of the email template
|
Method
|
The smishing technique employed
Data Submit = Used to detect target users who submit data on the landing page
MFA = Used to detect target users who entered MFA credentials
Click-Only = Used to detect target users who click unknown links in the smishing text
|
Tags
|
Tags can be added to the email template to enable viewing using related tag lists.
|
Difficulty
|
The level of difficulty to recognize a smishing attempt.
(Easy, Moderate, Difficult)
|
Created By
|
System: Standard smishing templates are provided with the module.
Custom: smishing text created or customized by users.
|
Date Created
|
The date and time the email template was created
|
- Click the +New button in the upper right corner of the Smishing Simulator > Smishing Scenarios > Template Info page.
- Complete the required fields on the first page, then click Next.
- Write the text message for your template on the Text Message Settings page. Note: Use the merge tag {PHISHINGURL} for the link to be added to the text message
- Click Save to complete the process.
Merge Tag
|
Description
|
---|---|
Full Name
|
Inserts the target user's first and last name.
|
First Name
|
Inserts the target user's first name.
|
Last Name
|
Inserts the target user's last name.
|
Phishing URL
|
Inserts a phishing simulation URL for the recipient to click and view the landing page.
|
Company Name
|
Displays your organization's name, sourced from the company profile.
|
Date Sent
|
Inserts the date when the campaign is launched.
|
Current Date
|
Inserts the current date when the campaign is launched.
|
Current Date Plus 10 Days
|
Inserts a date that is 10 days after the campaign's launch date.
|
Current Date Minus 10 Days
|
Inserts a date that is 10 days before the campaign's launch date.
|
Random Number One Digit
|
Generates and inserts a random one-digit number.
|
Random Number Two Digit
|
Generates and inserts a random two-digit number.
|
Random Number Three Digit
|
Generates and inserts a random three-digit number.
|
Template name
|
The name of the smishing template
|
Category
|
The smishing technique employed
Data Submit: Used to detect recipients who submit data on the landing page
MFA: Used to detect target users who entered MFA credentials
Click-Only: Used to detect recipients who click unknown links in the smishing email
|
Tags
|
Tags can be added to the landing page to enable viewing using related tag lists.
|
Difficulty
|
The level of difficulty to recognize a smishing attempt.
(Easy, Moderate, Difficult)
|
Created By
|
System: Standard landing page templates provided with the module.
Custom: Landing pages created or customized by users.
|
Date Created
|
The date and time the landing page was created.
|
- Click the +New button in the upper right corner of the Smishing Simulator > Scenarios > Landing Page Templates page.
- Complete the required fields on the first page, then click Next.
- On the Page Settings page, provide the smishing link: the URL to be used in the smishing SMS messages.
Merge Tag
|
Description
|
---|---|
Full Name
|
Inserts the target user's first and last name.
|
First Name
|
Inserts the target user's first name.
|
Last Name
|
Inserts the target user's last name.
|
Company Name
|
Displays your organization's name, sourced from the company profile.
|
Date Sent
|
Inserts the date when the campaign is launched.
|
Current Date
|
Inserts the current date when the campaign is launched.
|
Current Date Plus 10 Days
|
Inserts a date that is 10 days after the campaign's launch date.
|
Current Date Minus 10 Days
|
Inserts a date that is 10 days before the campaign's launch date.
|
Random Number One Digit
|
Generates and inserts a random one-digit number.
|
Random Number Two Digit
|
Generates and inserts a random two-digit number.
|
Random Number Three Digit
|
Generates and inserts a random three-digit number.
|