Awareness: practise phishing and train at the moment of the click

What Conbool Awareness does, how an exercise message travels, what happens after a click and where the exercises come from.

Technology stops most of it. What gets through is the well-made message, and there a person decides. Conbool Awareness practises exactly that moment.

A campaign sends exercise messages to a selected group and measures who opens, clicks and enters data. The value does not lie in the rate, but in what happens immediately afterwards.

The path of an exercise message

  1. Campaign: template, target group and period are set.
  2. Delivery into the real mailbox, spread over the period.
  3. Click on the link, or a report through the report button.
  4. Landing page showing exactly the signs by which the message could have been recognised.
  5. Lesson, assigned immediately and matching the technique.

Without the last step a simulation would only be a statistic. Training that arrives a week later as a separate email meets a different person in a different mood.

What controls the assignment

The lesson follows the technique: whoever falls for CEO fraud gets the lesson on CEO fraud.

The language follows the lesson, not the browser. If the lesson does not exist in the person's language, no assignment is made. A lesson nobody understands would be worse than none.

A detected security scanner receives no assignment. Otherwise the inspection systems would be trained, and the results would report clicks that no human made.

Where the exercises come from

Alongside the template library there is the account's own attack traffic: messages from quarantine can be defused and reused as an exercise. See exercises from real attacks.

Setup without mail routing

Awareness does not need mail routing through Conbool. Exercises come from a shared sender domain and go to the MX of your domain.

  1. Configuration, "Without changing the mail flow".
  2. Enable the domain by TXT record or Microsoft 365.
  3. "Open Awareness": enable it, confirm the delivery exception, plan the first campaign, see sender and delivery.

Awareness does not work without a domain of your own: reported exercises are matched by the domain of the reporting address.

Next