domains / families / security / conducting-spearphishing-simulation-campaign

conducting-spearphishing-simulation-campaign

separate

Run a targeted spearphishing simulation for initial access by developing OSINT-derived pretexts, building payloads (HTML smuggling, macro docs, ISO/LNK, OneNote, QR codes), standing up look-alike-domain email infrastructure with SPF/DKIM/DMARC via GoPhish, and tracking results. Use in authorized engagements to gain initial access via personalized phishing against specific individuals, distinct from broad campaigns.

When to use

• When conducting security assessments that involve conducting spearphishing simulation campaign
• When following incident response procedures for related security events
• When performing scheduled security testing or auditing activities
• When validating security controls through hands-on testing

When not to use

• broad campaigns

Skill page

Source