phishing maemail injodzi huru yekuchengetedza kune mabhizinesi eese saizi. Muchokwadi, iwo ndiwo nhamba yekutanga nzira iyo matsotsi anowana mukana kune network network.
Ndosaka zvakakosha kuti vashandi vakwanise kuziva maemail ephishing pavanoaona.
Mune ino blog post, isu tichakurukura maitiro aungaita GoPhish phishing simulations kudzidzisa vashandi vako maitiro ekuona phishing kurwiswa.
Isu tinozopawo mamwe matipi ekuti iwe ungaderedza sei njodzi yekuti bhizinesi rako rikanganisirwe nekurwiswa kwe phishing.
Chii chinonzi GoPhish?
Kana usiri kujairana neGophish, chishandiso chinokutendera kuti utumire akateedzerwa phishing emails kune vashandi vako.
Iyi inzira yakanaka yekuvadzidzisa nzira yekuziva maemail e phishing, pamwe nekuyedza ruzivo rwavo pamusoro pechinyorwa.
Ungashandisa sei GoPhish?
Nhanho #1. Tora GoPhish Running
Kuti ushandise Gophish, iwe uchada sevha yeLinux ine Golang uye GoPhish yakaiswa.
Iwe unogona kuseta yako wega GoPhish server uye kugadzira yako matemplate uye mapeji ekumhara.
Neimwe nzira, Kana iwe uchida kuchengetedza nguva uye kuwana mukana kune edu matemplate nerutsigiro, unogona kugadzira account pane imwe yemaseva edu anomhanya GoPhish wobva wagadzirisa marongero ako.
Nhanho #2. Tora SMTP Server Inomhanya
Kana uchitova neSMTP server, unogona kusvetuka izvi.
Kana iwe usina SMTP server, buckle in!
Mazhinji makuru masevhisi masevhisi egore, uye email vanopa masevhisi, vari kuita kuti zvinyanye kuoma kutumira email.
Waimbogona kushandisa masevhisi akaita seGmail, Outlook, kana Yahoo pakuyedzwa kwekubira, asi senge sarudzo dzakaita senge "Gonesa Isina Yakachengeteka App Access" yakadzimwa nemasevhisi aya ePOP3/IMAP rutsigiro, sarudzo idzi dziri kudzikira.
Saka chii chinonzi red teamer kana Cybersecurity consultant kuita?
Mhinduro iri kumisikidza yako wega SMTP server pane SMTP-inoshamwaridzika virtual private server (VPS) host.
Ndakagadzirira gwara pano pane makuru eSMTP-anoshamwaridzana VPS mauto, uye kuti iwe unogona sei kumisikidza yako yakachengetedzwa-yakachengeteka SMTP sevha uchishandisa Poste.io uye Contabo semuenzaniso: https://hailbytes.com/how -to-set-up-a-working-smtp-email-server-for-phish-testing/
Nhanho #3. Gadzira yako phish yekuedza simulations
Paunenge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchingedzo sevha, unogona kutanga kugadzira yako yekufananidza.
Paunenge uchigadzira kuenzanisa kwako, zvakakosha kuti uite kuti ive yechokwadi sezvinobvira. Izvi zvinoreva kushandisa malogos emakambani chaiwo uye kushambadzira, pamwe nemazita chaiwo evashandi.
Iwe unofanirwawo kuedza kutevedzera maitiro e phishing maemail ari kutumirwa kunze nevabavha. Nekuita izvi, iwe unozokwanisa kupa vashandi vako kudzidziswa kwakanakisa.
Nhanho #4. Kutumira Phish Kuedza Simulations
Paunenge uchinge wagadzira yako yekufananidza, unogona kuitumira kune vashandi vako.
Izvo zvakakosha kuti uzive kuti haufanirwe kutumira akawanda simulations kamwechete, sezvo izvi zvinogona kuvakurira.
Zvakare, kana uri kutumira vanopfuura 100 vashandi phish kuyedza simulations kamwechete, iwe unozoda kuve nechokwadi chekuti urikudziya yako SMTP server IP kero kudzivirira nyaya dzekutumira.
Unogona kutarisa gwara rangu paIP yekudziya pano: https://hailbytes.com/how-to-warm-an-ip-address-for-smtp-email-sending/
Iwe unofanirwawo kupa vashandi nguva yakakwana yekupedzisa simulation, kuitira kuti vasanzwe vachimhanyiswa.
Maawa 24-72 inguva yakakodzera yenguva kune mazhinji emamiriro ekuyedza.
#5. Taura nezvevashandi vako
Mushure mekunge vapedza simulation, unogona kuvatsanangurira pane zvavakaita nemazvo uye kwavaigona kugadzirisa.
Kuongorora vashandi vako kunogona kusanganisira kuongorora mhedzisiro yese yemushandirapamwe, kuvhara nzira dzekuziva kuti phish simulation yakashandiswa muyedzo, uye kuratidza zvakabudirira sevashandisi vakashuma yekunyepedzera.
Nekushandisa GoPhish phishing simulations, iwe unozogona kudzidzisa vashandi vako maitiro ekuziva phishing email nekukurumidza uye zvakachengeteka.
Izvi zvichabatsira kudzikisa njodzi yebhizinesi rako kukanganiswa neiyo chaiyo phishing kurwisa.
Kana usiri kujairana neGophish, tinokukurudzira kuti uzviongorore. Icho chishandiso chikuru chinogona kubatsira bhizinesi rako kugara rakachengeteka kubva pakurwiswa kwe phishing.
Unogona kuvhura yakagadzirira-kushandisa-vhezheni yeGoPhish paAWS nerutsigiro kubva kuHailbytes pano.
Kana iwe wakaona iyi blog positi inobatsira, tinokukurudzira kuti ugovane netiweki yako. Tinokukokawo kuti utitevere pasocial media kuti uwane mamwe matipi uye mazano ekuti ugare wakachengeteka online. Ndatenda nekuverenga!
Iwe unoshandisa GoPhish phishing simulations musangano rako?
Ko iyi blog post yakakubatsira kudzidza chero chinhu chitsva nezve Gophish? Tizivise mumashoko ari pasi apa.
