Setting up a phishing campaign

Phishing campaigns in Guardey allow you to simulate real-world phishing attacks, helping you assess how your users respond to phishing attempts. Follow these steps to set up your phishing campaign:

Step 1: Access the Phishing Module

1. Log in to your Guardey admin account.
2. From the dashboard, navigate to the Phishing section in the menu.

Step 2: Create a New Campaign

1. In the Phishing section, click on Create New Campaign.

Step 3: Whitelisting the Campaign

Before proceeding, ensure that your email servers are configured to allow the phishing simulation emails to be delivered.

1. Follow the instructions to whitelist Guardey’s phishing domains and IP's in your email provider.
2. If you have any other extra filters on your email boxes, please whitelist the domains and IP's there as well. This will help avoid phishing emails being marked as spam or blocked by your system’s security filters.

Step 3: Select a Phishing Template

1. Browse through the available Phishing Email Templates.
2. Choose a template that aligns with your goals, such as simulating a common phishing attack (e.g., fake login requests, suspicious invoice notifications). You can filter on language and level.

Step 4: Name Your Campaign

1. After selecting the template, you can now give your campaign a Campaign Name and a brief description for easy reference.

Step 5: Select the Sending Domain

1. Choose the domain from which you would like to send the phishing campaign. It is only possible to send emails to one domain per campaign. 
2. Ensure whitelisting is set up for the selected domain.

Step 6: Schedule the Campaign

1. Set the start date and time for the campaign.
   • You can schedule it to begin immediately or at a future date.

Step 7: Assign Target Users

1. Select the group of users you want to target in this campaign.
   • You can assign the campaign to individual users, groups, or the entire organization.
2. Test Email: Optionally, send a test email to yourself to preview how the phishing email will appear in the users' inboxes and if the whitelisting is working.

Step 8: Review and Launch

1. Review your campaign settings, including the selected template, domain, schedule, and target users.
2. Once everything is correct, click Launch Campaign.

Step 9: Monitoring Campaign Progress

1. After launching the campaign, you can track its progress in real-time by navigating to the Campaign Overview.
   • You’ll see metrics such as emails sent, opened, clicked, and data submitted by users.
2. Use these insights to evaluate user behavior and identify vulnerabilities in your organization.