How to create Phishing Campaign Flow in TSAT?

Please follow the below steps to create a Phishing Template

Step 1 : Click on Campaign Templates" on left side menu and then click on "Create New" as shown in the below screenshot.

Step 2 : Input the below details in the opened form after clicking on Create New button.

1. Template Name - Name of the template (should be unique),
   
2. Select Category - Category is based on Template's topic,
   
3. Select Language - Language of the template, 
   
4. Select Simulation Type - There are 2 types of simulations - Simulation Attack & Simulation Attack +Training
   
5. Simulation Attack is for phishing campaign only.
   
6. Simulation Attack + Training is for sending phishing emails and once the user clicks or submits the data, he/she will receive awareness training, (Available for Phishing Simulation only)
7. Select Attack vector - Select "Phishing" for phishing template creation.
8. Click on "Go To Next" once the inputs have been filled.
   
   

Step 3 : Please enter the email content created in basic HTML & CSS on this screen. You have the flexibility to use images as needed. If you prefer to fetch an image using a link, simply place the link in the src="" tag.

Alternatively, you can upload the image using the "Add Attachment" option below and reference it by its name in the "cid:" tag.

Note : Ensure that the image name does not contain any spaces and matches exactly with the uploaded image.

The upload image option will appear when you click on the "Go To Next" button and return to this screen again by clicking on "Previous" button.

Alternatively, you can employ another method called "Import Email." Just click on the button situated in the upper right corner and paste the entire Email Header of the email you wish to duplicate.

Tick the "Add tracking" checkbox to track the email open, link click etc. If you don't enable it then you may miss the campaign tracking.

Once you have completed the email template, click on "Go To Next".

Step 4 : On this screen, you need to select the Landing URL which can be related to your template topic or look a like domain of your original domain. You can add your own domain.

To add a new Landing URL Domain then click on the below Link -

Link

Now proceed to write basic HTML and CSS code for constructing the landing page. If necessary, you may utilize CDN links and JavaScript within the script tags.

Alternatively, you can employ another method called "Import Site." Just click on the button situated in the upper right corner and paste the URL of the webpage you wish to duplicate into the designated input box.

The entire landing page will then be generated automatically. Feel free to modify the template according to your preferences if needed.

NOTE : We recommend using modified brand logos and images to prevent Google from blocking the landing page.

The Landing page here serves the purpose in encouraging users to submit their data.You will find check box to tick and untick capturing username and password.

There is another checkbox for an "Auto-Instant Awareness Page." If you check this box, an awareness page will appear once data is submitted. This page will provide six pointers to remember to help you avoid phishing attacks in the future. If you uncheck the box, the tool also gives you the option to upload your own custom link.

Then click on "Go To Next" to save the changes and move on to the next step.

Step 5 : In this step, you are required to fill the below details -

1. Sender Display Name : Enter the Sender Name,
   
2. Sender Name : Sender Name & Domain (as per the template topic)
3. Header Key Details : You can configure a custom header to avoid being flagged or blocked,
   
4. Fake CC : You can put an email ID as CC for make an email more authentic, but its optional not required,
   

If you wish to send emails through your Email ID then you can configure your SMTP simply by enabling on the "Custom" option and input the SMTP details.

You can make these changes anytime.

Once all the configuration is done, click on "Go To Next" to save the inputs and move to the next step.

Step 6 :  Click on "Refresh" button to see the updated changes and preview the SMS template, Landing page, Landing URL, Sender ID, etc.

And for testing the template, click on "Test Campaign Template Message" and input first name(mandatory), last name (optional) and email id to send the test email.

If the test email is successful then template is ready to be executed in the campaign.

This is how you create a Phishing Template from scratch.

How to run a Campaign, click on the below link -

Link

• Related Articles

• How To Edit Campaign Templates in ThreatCop?

  TSAT offers a range of features, including the ability to edit existing templates. This article will guide you through the process. To edit a template, ensure it is categorized under "Custom Templates," as only custom templates can be edited. If you ...

• How to create a new template (Whole Flow)

  Two ways to create email templates: Approach 1: Manual HTML Source Code Method We'll discuss this approach in detail in this article. Approach 2: AI Template Creation For details on AI template creation, please refer to the existing information ...

• TSAT User Guide

  TSAT tool is used for various simulations for the purpose of raising awareness among the users. These simulations can be done using various attack vectors such as Phishing ,QR code,Attachment, Ransomware, Smishing, Vishing & Whatsapp Phishing. Here’s ...

• How to run a campaign in TSAT?

  To execute a smishing campaign, please follow the below steps - Step 1 : Go to the required template which you would like to use for a Campaign. Click on three dots of that particular template and then click on "Create Campaign". How to create a ...

• Whitelist TSAT in Cisco Ironport

  If you’re using Cisco Ironport for spam filtering, you might want to whitelist certain sources to ensure important emails and notifications get through to your end users. This guide will walk you through the process of whitelisting in Cisco Ironport, ...