Social Engineering Services

We conduct phishing attempts on your employees via e-mail messages and e-mail attachments. Depending on your needs we customize our approach.

• Broad phishing attempt of all employees with standardized scenario's for training and awareness purposes. This type is especially good to measure the progress of awareness campaigns over time.
• Targeted spearphishing with the goal of extracting credentials from employees. The scenarios are based on OSINT (Open Source Intelligence) data collected about your organization and employees. This type of phishing service resembles a real world attacker specifically targeting your organization.
• Custom phishing that is specifically tailored to your needs. For example phishing with malicious office documents to emulate real world Advanced Persistent Threat groups or ransomware infection vectors.

Read More: Phishing Awareness

We call a number of your employees pretending to be from a trusted organization and try to trick them into sharing sensitive information over the phone. We use urgency and fear tactics that criminal attackers use.

You receive anonymized video footage of the investigation that you can use to train other employees. This is an effective learning method.

During a Mystery Guest Assessment, our ethical social engineers try to gain physical access to your offices and premises. They then try to gather information present on desks and workstations, in documents, archives and on the internal company network, through workstations, printers or network connections.

Besides e-mail phishing and telephone phishing, cybercriminals also use other forms of deception, for example, phishing via SMS, or ‘smishing’. You can employ our social engineers for the following tactics to test your resilience:

• USB-phishing: attackers leave or give away a USB flash drive with malware on it. If someone plugs the USB into a computer, the attacker can gain access.
• SMS-phishing, or smishing, involves scammers sending fake text or instant messages. They pressure people with messages that appear urgent and then ask people to click on a link or share personal information.
• QR phishing, or quishing, uses QR codes that lead to a malicious website after scanning. Scammers try to trick people into scanning this QR code, with the aim of stealing personal information or installing malware.

Increase alertness for unknown individuals within your company with the game "Spot the Mole". This Incognito Challenge encourages employees to approach unknown individuals.