HOW BEST CAN I TRAIN MY STAFFS ON PHISHING AWARENESS?

[selorm]

WILL I HAVE ANY ISSUES INSTALLING KING-PHISHER ON CENTOS 6?

[Lord_KamOS]

Just give us their emails and we will take care of it  :)

[selorm]

why do I have to give you my employees email addresses?

[Lord_KamOS]

17 hours ago, kdodge said:

do not give up your employees email addresses, its a joke.

Exactly.

But to answer your questions.

King phisher should install fine on CentOS.

Maybe hire a red team or show them a documentary.

https://www.youtube.com/watch?v=pL9q2lOZ1Fw

https://www.youtube.com/watch?v=wxK9diRYoqk

 

Edited July 24, 2017 by Lord_KamOS

[PoSHMagiC0de]

And if you need third party I have heard some good things from KnowBe4.  Have not used them myself but have a friend who is engineer at company that does and he boasted about them and their phishing templates.

[Dave-ee Jones]

Good on you for raising the awareness! There are many articles and posts on the internet that help you protect yourself from these attacks. Basically what you have to be careful of is spoofed websites and domains, and be very careful about giving any personal details online to anything.

In terms of "evil portals" (login pages that look legit but take your details), there are some common giveaways (for online ones anyway):

1. You may try and log into something as simple as Facebook, but you might notice the website URL looks something like this: "facebo.ok/login/portal" (or see attachment)

2. You might notice bad spelling mistakes or bad grammar - these are common signs of overseas hackers who have put their language into Google Translate and chucked it on a fake login portal

3. You might notice your browser is saying this website isn't secured (see attached)

4. You might even notice something as simple as an image not rendering correctly or out-of-place (different to usual, is what I'm getting at)

Those are all things you should look out for when you are thinking about inputting personal details into a website.

EDIT: I also noticed that the Facebook URL in the attachment - it doesn't even say "facebook" it says "facelook". It's amazing how much your eyes play tricks on you and they will exploit that, as they did there.
 

Edited July 24, 2017 by Dave-ee Jones