phishing emails yog ib qho kev hem thawj loj rau kev lag luam ntawm txhua qhov ntau thiab tsawg. Qhov tseeb, lawv yog tus naj npawb ib txoj hauv kev uas hackers tau nkag mus rau cov tuam txhab network.
Tias yog vim li cas nws tseem ceeb heev rau cov neeg ua haujlwm kom muaj peev xwm txheeb xyuas phishing emails thaum lawv pom lawv.
Hauv tsab ntawv blog no, peb yuav tham txog yuav ua li cas koj tuaj yeem siv GoPhish phishing simulations los qhia koj cov neeg ua haujlwm yuav ua li cas pom phishing tawm tsam.
Peb kuj tseem yuav muab qee cov lus qhia txog yuav ua li cas koj tuaj yeem txo qhov kev pheej hmoo ntawm koj lub lag luam raug cuam tshuam los ntawm phishing nres.
GoPhish yog dab tsi?
Yog tias koj tsis paub txog Gophish, nws yog ib qho cuab yeej uas tso cai rau koj xa simulated phishing emails rau koj cov neeg ua haujlwm.
Qhov no yog ib txoj hauv kev zoo los cob qhia lawv txog kev txheeb xyuas phishing emails, nrog rau kev sim lawv cov kev paub txog kev kawm.
Koj tuaj yeem siv GoPhish li cas?
Kauj Ruam #1. Tau txais GoPhish khiav
Txhawm rau siv Gophish, koj yuav xav tau Linux server nrog Golang thiab GoPhish ntsia.
Koj tuaj yeem teeb tsa koj tus kheej GoPhish server thiab tsim koj tus kheej cov qauv thiab nplooj ntawv tsaws.
Xwb, Yog tias koj xav txuag lub sijhawm thiab nkag mus rau peb cov qauv thiab kev txhawb nqa, koj tuaj yeem tsim ib tus account ntawm ib qho ntawm peb cov servers khiav GoPhish thiab tom qab ntawd teeb tsa koj qhov chaw.
Kauj Ruam #2. Tau txais SMTP Server khiav
Yog tias koj twb muaj SMTP server, koj tuaj yeem hla qhov no.
Yog tias koj tsis muaj SMTP server, buckle hauv!
Ntau qhov chaw pabcuam huab loj, thiab cov chaw pabcuam email, ua rau nws nyuaj rau kev xa email.
Koj tau siv tau cov kev pabcuam xws li Gmail, Outlook, lossis Yahoo rau kev sim phishing, tab sis raws li cov kev xaiv xws li "Enable Less Secure App Access" raug kaw los ntawm cov kev pabcuam no rau POP3 / IMAP kev txhawb nqa, cov kev xaiv no tau poob qis.
Yog li cas yog ib tug liab teamer los yog cybersecurity kws pab tswv yim ua?
Cov lus teb yog teeb tsa koj tus kheej SMTP server ntawm SMTP-phooj ywg virtual private server (VPS) tus tswv.
Kuv tau npaj ib daim ntawv qhia ntawm no ntawm qhov loj SMTP-phooj ywg VPS hosts, thiab yuav ua li cas koj tuaj yeem yooj yim teeb tsa koj tus kheej muaj peev xwm tsim tau SMTP server siv Poste.io thiab Contabo ua piv txwv: https://hailbytes.com/how -to-set-up-a-working-smtp-email-server-for-phish-testing/
Kauj Ruam #3. Tsim koj cov kev sim phish simulation
Thaum koj muaj email server khiav, koj tuaj yeem pib tsim koj cov simulations.
Thaum tsim koj cov simulations, nws yog ib qho tseem ceeb kom ua kom lawv muaj tseeb li sai tau. Qhov no txhais tau hais tias siv lub tuam txhab logos tiag tiag thiab cov khoom lag luam, nrog rau cov npe neeg ua haujlwm tiag.
Koj yuav tsum tau sim ua raws li cov qauv ntawm phishing emails uas tam sim no raug xa tawm los ntawm hackers. Los ntawm kev ua qhov no, koj yuav muaj peev xwm muab koj cov neeg ua haujlwm nrog kev cob qhia zoo tshaj plaws.
Kauj Ruam #4. Xa Phish Test Simulations
Thaum koj tau tsim koj cov simulations, koj tuaj yeem xa lawv mus rau koj cov neeg ua haujlwm.
Nws yog ib qho tseem ceeb kom nco ntsoov tias koj yuav tsum tsis txhob xa ntau yam simulations ib zaug, vim qhov no tuaj yeem cuam tshuam rau lawv.
Tsis tas li, yog tias koj xa ntau tshaj 100 tus neeg ua haujlwm phish sim simulations ib zaug, koj yuav xav kom paub tseeb tias koj sov so koj SMTP server IP chaw nyob kom tsis txhob muaj teeb meem xa khoom.
Koj tuaj yeem tshawb xyuas kuv phau ntawv qhia txog IP cua sov ntawm no: https://hailbytes.com/how-to-warm-an-ip-address-for-smtp-email-sending/
Koj tseem yuav tsum muab sijhawm rau cov neeg ua haujlwm txaus los ua kom tiav qhov simulation, kom lawv tsis txhob maj nrawm.
24-72 teev yog lub sijhawm tsim nyog rau feem ntau ntawm cov xwm txheej sim.
#5. Debrief koj cov neeg ua haujlwm
Tom qab lawv ua tiav qhov simulation, koj tuaj yeem piav qhia lawv txog yam lawv ua tau zoo thiab qhov twg lawv tuaj yeem txhim kho.
Debriefing koj cov neeg ua haujlwm tuaj yeem suav nrog kev tshuaj xyuas tag nrho cov txiaj ntsig ntawm kev sib tw, suav nrog txoj hauv kev los txheeb xyuas qhov kev sim phish siv hauv kev sim, thiab qhia txog kev ua tiav zoo li cov neeg siv uas tau tshaj tawm qhov kev sim phishing.
Los ntawm kev siv GoPhish phishing simulations, koj yuav tuaj yeem qhia koj cov neeg ua haujlwm paub txheeb xyuas email phishing sai thiab nyab xeeb.
Qhov no yuav pab txo qis kev pheej hmoo ntawm koj lub lag luam raug cuam tshuam los ntawm kev tawm tsam phishing tiag.
Yog tias koj tsis paub txog Gophish, peb xav kom koj tshawb xyuas nws. Nws yog ib qho cuab yeej zoo uas tuaj yeem pab koj lub lag luam kom muaj kev nyab xeeb los ntawm phishing tawm tsam.
Koj tuaj yeem tso tawm qhov npaj-rau-siv version ntawm GoPhish ntawm AWS nrog kev txhawb nqa los ntawm Hailbytes ntawm no.
Yog tias koj pom cov ntawv blog no muaj txiaj ntsig, peb xav kom koj qhia rau koj lub network. Peb kuj caw koj ua raws peb ntawm kev tshaj xov xwm rau ntau lub tswv yim thiab cov lus qhia txog yuav ua li cas thiaj li muaj kev nyab xeeb hauv online. Tsaug nyeem ntawv!
Koj puas siv GoPhish phishing simulations hauv koj lub koom haum?
Cov ntawv blog no puas tau pab koj kawm dab tsi tshiab txog Gophish? Qhia rau peb paub hauv cov lus hauv qab no.
