Phishing Your Employees 101
Summary: An open source tool called the Simple Phishing Toolkit lets administrators clone any web page with a single click, build phishing lures, and load target lists from a spreadsheet, recording who clicked and when along with their browser, operating system and Internet address. First released in October 2011 and already in its fourth revision, the toolkit omits capture of data entered into phishing forms, though its two co-developers say that capability will come as an optional add-on in a future version.
What's compelling: A Krebs on Security reporter installed the toolkit with a free WampServer bundle and stood up a Gmail phishing campaign in under five minutes, and the co-developers describe a short list of employees in every organization who keep falling for the same lure every six to eight weeks.
Read the original at Krebs on Security ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026