User Tools

Site Tools


create_your_first_phishing_campaign

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Next revisionBoth sides next revision
create_your_first_phishing_campaign [2018/02/19 09:07] lucycreate_your_first_phishing_campaign [2019/02/04 15:36] – [STEP 3 - Choose Your Configuration Mode] lucy
Line 38: Line 38:
 ===== STEP 3 - Choose Your Configuration Mode ===== ===== STEP 3 - Choose Your Configuration Mode =====
  
-You may either continue with the **Expert Setup**, the **Setup Wizard** or a **Start with predefined campaign Template ** (called sample campaign in LUCY < 3.0) configuration. We recommend using the Setup Wizard when used for the first time. Another optional is to set a [[benchmark|Benchmark]] for a campaign. \\+You have different setup options like the **Expert Setup**, the **Setup Wizard** or a **Start with predefined campaign Template ** (called sample campaign in LUCY < 3.0). We recommend using the Setup Wizard when used for the first time. Another optional is to set a [[benchmark|Benchmark]] for a campaign. \\
  
-{{ 15.jpg?direct&600 }}\\+{{ setup_modesn.png?600 }}\\
  
 Sometimes a remote Firewall, Spam filter or Virus Filter might automatically scan all the URL's within a link. As a result you end up with false positives and LUCY will show all link clicked (success). To avoid such automatic link requests by some 3rd party application you can enable the antivirus/firewall protection and LUCY will ignore all GET requests for the first 30 or 60 seconds: Sometimes a remote Firewall, Spam filter or Virus Filter might automatically scan all the URL's within a link. As a result you end up with false positives and LUCY will show all link clicked (success). To avoid such automatic link requests by some 3rd party application you can enable the antivirus/firewall protection and LUCY will ignore all GET requests for the first 30 or 60 seconds:
Line 50: Line 50:
 ===== STEP 4 - Select one or multiple Phishing Scenario(s) ===== ===== STEP 4 - Select one or multiple Phishing Scenario(s) =====
  
-Now you need to select one or multiple phishing scenarios. Please check out what [[scenario_types|different scenario types are available]]. Make sure you have [[download_templates|downloaded all the latest scenarios]] first. +Now you need to select one or multiple phishing scenarios. Please check out what [[scenario_types|different scenario types are available]]. Make sure you have [[download_templates|downloaded all the latest scenarios]] first. If you allocate multiple scenarios in a campaign, you can still [[scenario_activation|activate or deactivate]] them at a later point.
  
 **Please note:** If you edit a scenario template within a campaign, the changes in the template will only apply to the campaign. If you change a scenario template in the generic settings, then the changes in the template are permanent. **Please note:** If you edit a scenario template within a campaign, the changes in the template will only apply to the campaign. If you change a scenario template in the generic settings, then the changes in the template are permanent.
Line 90: Line 90:
   * **Login Regexp**: Another option is to define some login filters to only catch valid logins (you could define the Domain Name in the User Name field or say that the Password has to be at least 8 characters to be accepted from LUCY). Example: This filter here ^(?=.*\d)(?=.*[A-Za-z])[A-Za-z0-9].{8,}$ would only allow logins with minimum 1 alphabetic character, minimum 1 digit & minimum length 8.    * **Login Regexp**: Another option is to define some login filters to only catch valid logins (you could define the Domain Name in the User Name field or say that the Password has to be at least 8 characters to be accepted from LUCY). Example: This filter here ^(?=.*\d)(?=.*[A-Za-z])[A-Za-z0-9].{8,}$ would only allow logins with minimum 1 alphabetic character, minimum 1 digit & minimum length 8. 
   * **Redirect URL**: This is used for [[create_a_phishing_campaign_with_only_a_hyperlink_in_mail_no_landing_page|hyperlink based scenarios]] or within a landing page to redirect to an awareness page.   * **Redirect URL**: This is used for [[create_a_phishing_campaign_with_only_a_hyperlink_in_mail_no_landing_page|hyperlink based scenarios]] or within a landing page to redirect to an awareness page.
 +  * **URL Shorting**: Details [[url_shortening|here]]
 \\ \\
 \\ \\
Line 116: Line 117:
   * **Step 8b**: Please also **choose the language** for each group. If you configured an English landing page, then select English also within that recipient group. If you have different groups with different languages within your company you can simply create a group and select a language for each recipient. LUCY then will direct each user to an individual landing page that [[dealing_with_multiple_languages_in_your_recipient_group|matches that language]].    * **Step 8b**: Please also **choose the language** for each group. If you configured an English landing page, then select English also within that recipient group. If you have different groups with different languages within your company you can simply create a group and select a language for each recipient. LUCY then will direct each user to an individual landing page that [[dealing_with_multiple_languages_in_your_recipient_group|matches that language]]. 
  
-  * **Step 8c**: **Insert a link**. The editor allows you to insert a link. You have two options: either insert %link% somewhere in your email body (this will generate a randomized link to identify the user) or select and mark a word in your mail body (1) and then click on the link symbol (2) and then insert the "LUCY link" with %link% in the input field. Please make sure the link variable is set in the HTML code, if you hide it behind another word (if you type http://www.example.com in the editor, LUCY will automatically create a hyperlink to http://www.example.com in the HTML code. If you want http://www.example.com pointing to your LUCY URL, please remove the link pointing to http://www.example.com in the source code or by clicking on the "unlink" symbol, and then select the text "http://www.example.com" and click on the link symbol again and insert %link% in the HTML code).+  * **Step 8c**: **Insert a link**. The editor allows you to insert a link. You have two options: either insert %link% somewhere in your email body (this will generate a randomized link to identify the user) or select and mark a word in your mail body (1) and then click on the link symbol (2) and then insert the "LUCY link" with %link% in the input field. 
  
 {{select_link.png?600}} {{select_link.png?600}}
  
 +Please make sure the link variable is set in the HTML code, if you hide it behind another Link. If you type a hyperlink instead a word, the editor will automatically detect that, and create the link in the code. But this link will be wrong: If you type http://www.example.com in the editor, LUCY will automatically create a hyperlink to http://www.example.com in the HTML code (1) and underline the URL. But if you want http://www.example.com pointing to your LUCY URL, please remove the link pointing to http://www.example.com in the source code directly, or remove it by clicking on the "unlink" symbol (2), and then select the text "http://www.example.com" and click on the link symbol again and insert %link% in the HTML code (3).
 +
 +{{ link_behind_l.png?600 }}
  
 For all other settings please read the [[Mail_Settings|Mail Settings Chapter]]. For all other settings please read the [[Mail_Settings|Mail Settings Chapter]].
create_your_first_phishing_campaign.txt · Last modified: 2020/08/20 10:48 by lucy