Let's reduce employee click-rates by up to 100% together

Yes, we do. Spear Shield Phishing Simulations are completely managed. We have many phishing templates pre-built and available to choose from and also own several custom domains. We continuously monitor the latest trending threats and ensure all of our out of the box templates are relevant and up to date to be able to provide the most realistic experience for your users as possible.

We sure can! Spear Shield offer complete customisation and can create hyper-personalised phishing campaigns tailored to your organisation. Including CEO Impersonation Attempts, Brand Impersonation attempts from 3rd party business partners, to anything you can think of! The team welcomes the opportunity to get creative with our phishing template designs.

Spear Shield can create phishing campaigns with links, credential harvesting and attachments.

Spear Shield will provide guidance on any steps required to ensure the emails deliver to your employees inboxes. Other than that, you can sit back, relax (just kidding... you have plenty of others things to do!) and wait for the reporting session.

Yes, we can.

Coming soon... It's an area we're currently evaluating. If you have an interest in performing a SMS phishing simulation on your employees - please do let us know.

Spear Shield will provide their advice and recommendations on landing pages on a case-by-case, per campaign basis. Any landing pages created will have the phished employee in mind and we will always find that sweet spot between being informative and keeping it a positive experience for your users.

Spear Shield has end-user awareness training content readily available. All phishing simulation landing pages are completely customisable and can include your corporate branding to provide assurance to your users that this was just a security exercise and not a real attack.

Yes, if you own your own training portal and would prefer to direct users to an internal LMS platform, Spear Shield can tailor the landing page accordingly.

Email Phishing
The attacker sends an email that looks legitimate, designed to trick the recipient into either entering information in reply or on a site that they can use to steal their data or to gain access to their device/network.

Spear Phishing
Spear phishing involves targeting a specific individual in an organisation to try to steal their login credentials. The attacker often first gathers information about the person before starting the attack, such as their name, position, and contact details.

Vishing
Vishing is short for 'voice phishing'. This is when someone uses the phone to try steal information from their victim. The attacker may disguise themselves as a trusted friend, relative or business contact.

HTTPS Phishing
An HTTPS phishing attack is carried out by sending the victim an email with a link to a fake website. The site may then be used to fool the victim into entering confidential information.

Pop-up Phishing
Pop-up phishing often uses a pop-up about a problem with your computer's security or some other issue to trick you into clicking. You are then directed to download a file, which ends up being malware, or to call what is supposed to be a customer support centre.

Whaling
A whaling attack is a phishing attack that targets a senior executive in an organisation. These individuals often have access to sensitive areas of the network, so a successful attack can result in access to valuable information that can be used for ransomware and exploitation.

Social Engineering
Social engineering attacks pressure a victim into revealing sensitive information by manipulating them psychologically.

Angler Phishing
Anglers use fake social media posts to get their victims into providing login info or downloading malware.

Smishing
Smishing is phishing through some form of a text message or SMS.

Main-in-the-Middle (MTM) Attacks
With a man-in-the-middle attack, the hacker gets in 'the middle' of two parties and tries to steal information exchanged between them, such as account credentials.

Website Spoofing
A hacker creates a fake website that looks legitimate. When you use the site to log in to an account, your data is collected by the attacker.

Domain Spoofing
Also referred to as DNS spoofing, is when a hacker imitates the domain of a company - either using email or a fake website - to lure the victim into entering sensitive information.

Image Phishing
Image phishing uses images with malicious files in them meant to aid an attacker in stealing your account info or infecting your device.

Search Engine Phishing
A search engine phishing attack involves an attacker making fake products that looks attractive. When these pop up in a search engine, the target is asked to enter sensitive information before purchasing, which goes to the hacker.