Phishing simulations

Phishing describes the process of obtaining sensitive data by deceiving the communication partner. A wide variety of media are used for this purpose, but in most cases a phishing attack is carried out by e-mail. The target person is given the impression of being forced to act by fictitious circumstances, such as a request to change a password due to suspicious activities. This false sense of urgency causes the target to be careless and become inattentive, resulting in the deception attempt going undetected and sensitive data flowing to the attacker. 

It is important to understand that phishing targets the human element in technology and thus protection against such attacks can only be supported - not prevented - by technical measures such as spam filters.  

We help you to identify possible risks within your company in time and to ensure that your employees and your data remain safe by means of realistic phishing simulations and targeted awareness training.

In many cases, phishing attacks aim to obtain sensitive data such as login or payment information from the target employee. Attackers can then use this information to access other data, such as other employees' data or even customer data. 

The consequences for the company range from valuable, stolen company internals to serious financial damage and also media uproar, which can lead to the loss of customers. Depending on the type of data captured, there may also be consequences for employees or customers in their private lives. This can result in identity theft and wire fraud for affected individuals.

Mail attachments and download links provide another common attack scenario. When the target employee opens a malicious attachment, malicious code is executed on the employee's computer, which the attacker has embedded in the attachment. This malicious code can have various purposes, but often it is a so-called ransomware, which encrypts all data on the hard drive and demands a large sum of money as a ransom for decryption.  

In the case of ransomware, large financial losses loom for the company. It can also cause downtime or compromise systems due to executed malicious code. Cleaning up infected systems is also a time-consuming and costly process. In addition, the incident is also the subject of media coverage, which can lead to the loss of customers and thus to financial losses.