KnowBe4 offering a free phishing attack simulation

Rows
network world

By Mark Gibbs

Close

Thank you

Your message has been sent.

Close

Sorry

There was an error emailing this page.

You can test how susceptible your staff are to phishing

NetworkWorld
|May 29, 2014 7:47 PM

‘);//–“;
var adDivString = “”;
placementDiff = applyInsert($(this), adDivString);
if (debug) {
console.log(“Just placed an ad and the placementDiff is: ” + placementDiff);
}
placementTarget = cumulativeHeight + placementDiff + interModuleHeight + adHeightBuffer;
}
else {
var moduleDivString = “”;
var elementId = “drr-mod-“+moduleCounter;
moduleDivString = “”;
modules.push(elementId);

placementDiff = applyInsert($(this), moduleDivString);
if (debug) {
console.log(“Just placed a module and the placementDiff is: ” + placementDiff);
}
placementTarget = cumulativeHeight + placementDiff + interModuleHeight + moduleHeightBuffer;
moduleCounter++;
}
loopCounter++;
}
// Avoid placing elements too soon due to non-large figures inflating the cumulative height
if ($(this).is(“figure”) !$(this).is(“figure.large”)) {
cumulativeHeight += grafHeight;
}
else {
cumulativeHeight += $(this).height() + grafHeight;
}
}
});

// clone Related Stories module m-15 to come in after 2nd para in article body for mobile breakpoint display
var $relatedStories = $(‘.related-promo-wrapper’);
if ($relatedStories.length) {
var $relatedStoriesClone = $relatedStories.clone();
$relatedStoriesClone.insertAfter( “#drr-container p:eq(1)”);
}

var $insiderPromo = $(‘.insider-promo-wrapper’);
if ($insiderPromo.length) {
var $insiderPromoClone = $insiderPromo.clone();
$insiderPromoClone.insertAfter( “#drr-container p:eq(1)”);
}

//place left side element
cumulativeHeight = 0;
var leftPlacementTarget = tagHeight = leftPlacementTarget) {
if (debug) {
console.log(“congratulations… we’ve passed the initial start point”);
}
if (leftPlacementIndex == null) {
//it’s not good enough to not be a left avoid – it also shouldn’t be a

with an immediately preceding small or medium image left avoid.
if (!isLeftAvoid($(this)) noPrevFigures($(this)) ) {
leftPlacementIndex = $(this).index();
$leftPlacementElement = $(this);
leftPlacementLookaheadStart = cumulativeHeight;
if (debug) {
console.log(“is not a left avoid and no prev figures. ########## set placementIndex (“+leftPlacementIndex+”) and lookaheadStart (“+leftPlacementLookaheadStart+”) ##########”);
}
} else {
if (debug) {
console.log(“is a left avoid or has previous figures. continue”);
}
}
} else {
if (debug) {
console.log(“#### leftPlacementIndex already set to “+leftPlacementIndex+”. looking ahead…”);
}
//not null; has been set
if ((cumulativeHeight – leftPlacementLookaheadStart) leftIntervalHeight) {
if (debug) {
console.log(“###### THRESHOLD REACHED. LOOKAHEAD COMPLETE. END ###### (cumulativeHeight – leftPlacementLookaheadStart) (“+(cumulativeHeight-leftPlacementLookaheadStart)+”) leftIntervalHeight (“+leftIntervalHeight+”).”);
}
return false;
} else {
if (debug) {
console.log(“threshold not reached: (cumulativeHeight – leftPlacementLookaheadStart) (“+(cumulativeHeight-leftPlacementLookaheadStart)+”) tags
if (!(isLeftAvoid($(this)) ($(this).hasClass(‘small’) || $(this).hasClass(‘inline-small’) || $(this).hasClass(‘medium’) || $(this).hasClass(‘inline-medium’) || $(this).hasClass(‘apart’) ))) {
cumulativeHeight += $(this).height() + grafHeight;
}
if (debug) {
console.log(“——————– set cumulativeHeight(“+cumulativeHeight+”) —————“);
console.log(“”);
}
}
});
}

if (leftPlacementIndex != null elementNotNearEnd($leftPlacementElement, leftPixelWindow)) {
if (debug) {
console.log(” insert into index “+leftPlacementIndex);
}
$(“#drr-container”).children().eq(leftPlacementIndex).before(“

“);
}

IDG.GPT.trackOmniture();

// Add Right rail module content
for (var i=0; i= 0) {
referrerValue = getReferrerArticle(“”, previousUrl); // sets _article if ajax returns article
if (_article != null) {
if (_article.categories instanceof Array _article.categories.length 0) {
var referrerCatId = _article.categories[0];
epoParams += “catId=” + referrerCatId + “referrer=article”;
}
}
else {
epoParams += “typeId=” + defaultTypeId + “referrer=home”; // default is ‘home’ behavior
}
}
// From SEARCH: Show article with catId same as current article
else if (previousUrl.indexOf(“google”) = 0 || previousUrl.indexOf(“yahoo”) = 0 || previousUrl.indexOf(“bing”) = 0) {
var categories = [2206];
if (categories instanceof Array categories.length 0) {
var primaryCatId = categories[0];
epoParams += “catId=” + primaryCatId + “referrer=search”;
}
else {
epoParams += “typeId=” + defaultTypeId + “referrer=home”; // default is ‘home’ behavior
}
}
// Default is to show like coming from homepage
else {
epoParams += “typeId=” + defaultTypeId + “referrer=home”; // default is ‘home’ behavior
}
return epoParams;
}

/**
* @param jqo Original jquery object target
* @param divString The div to be inserted.
* @return Difference in height between original placement target and final target.
* Checks first 6 elements for an allowable placement (600 pixel window).
* If none, check nearby for elements that are not right avoids.
* If none, place element before current target.
*/
function applyInsert(jqo, divString) {
if (debug) {
console.log(“applyInsert at top and jqo index is: ” + jqo.index());
}

for (var i=0; i 0) {
children = $(“#drr-container”).children().slice(jqo.index(), allowElement.index() );
}
else {
children = $(“#drr-container”).children().slice(allowElement.index(), jqo.index());

}
if (children != null) {
children.each(function(i) {
if (debug) {
console.log(“About to add this element’s height to heigh diff offset”);
console.log($(this));
}
height += $(this).height();
});
}
if (offset 300) {
if (debug) {
console.log(“isRightAvoid: found pre. return true”);
}
return true;
}
if (jqo.is(“figure”) jqo.hasClass(‘large’)) {
if (debug) {
console.log(“isRightAvoid: found figure.large return true”);
}
return true;
}
if (jqo.is(“figure”) jqo.hasClass(‘medium’) jqo.hasClass(‘inline’)) {
if (debug) {
console.log(“isRightAvoid: found figure has class medium and inline.”);
}
return true;
}

if (jqo.hasClass(‘download-asset’)) {
if (debug) {
console.log(“isRightAvoid: found class download-asset return true”);
}
return true;
}
if (jqo.is(“aside”) jqo.hasClass(‘tableLarge’)) {
if (debug) {
console.log(“isRightAvoid: found class download-asset return true”);
}
return true;
}

}
return false;
}

// Returns true if height of all elements after this one is more than 500; false otherwise
function elementNotNearEnd(element, pixelWindow) {
if (pixelWindow == null) {
pixelWindow = 500;
}
if (element == null) {
return false;
}
var remainingHeight = 0;
var children = $(“#drr-container”).children().slice(element.index());
if (children == null) {
return false;
}
children.each(function(i){
remainingHeight += $(this).height();
});
if ( remainingHeight pixelWindow) {
return true;
}
else {
if (debug) {
console.log(“Element too close to end. Remaining height is: ” + remainingHeight + ” and window is ” + pixelWindow);
}
return false;
}
}

/**
* Return true if need to avoid this element when placing left module.
*/
function isLeftAvoid(jqo) {
if (jqo.is(“figure”)) {
if (debug) {
console.log(“isLeftAvoid: found figure. return true”);
}
return true;
}
if (jqo.is(“aside.pullquote”)) {
if (debug) {
console.log(“isLeftAvoid: found pullquote. return true”);
}
return true;
}
if (jqo.is(“pre”)) {
if (debug) {
console.log(“isLeftAvoid: found pre. return true”);
}
return true;
}
if (jqo.is(“div.gist”)) {
if (debug) {
console.log(“isLeftAvoid: found github code block. return true”);
}
return true;
}
if (jqo.hasClass(“statsTable”)) {
if (debug) {
console.log(“isLeftAvoid: found class statsTable. return true”);
}
return true;
}
return false;
}

/**
* return true if there are no figures before the target placement that might bleed down into placement element
*/
function noPrevFigures($originalTarget) {
var targetIndex = $originalTarget.index();
var numElementsLookBack = 5;
var figureIndex = null;
var figureHeight = null;
var startIndex = targetIndex – numElementsLookBack

Here’s an interesting exercise: Phish your company’s staff. Why? Because it’s a really good idea to test your organization’s immunity to one of the most prevalent social engineering tricks used by the bad guys to gain information and or money.

Like the idea? You’ll like it even more because until midnight tomorrow KnowBe4 is offering a free simulated eBay phishing attack. Here’s how to take advantage of the offer:

1. Create a free account here: http://training.knowbe4.com/signup
2. Whitelist our email server, simple and fast: http://www.knowbe4.com/resources/frequently-asked-questions/ 
3. Upload your users’ email addresses, flat file, one line per address.
4. Click submit and a few minutes later it will be sent. In a couple of hours you will know the Phish-prone percentage of your users and your highest-risk employees. 

This is what your victims, er, users, will see:

From: CustomerService@eBay.Compromised.com

Subject: You Need To Change Your eBay Password Immediately 

Body:

Recently, hackers penetrated our network and stole 145 million user names and passwords. Yours was one of these. You need to change your eBay password immediately, so that your personal financial information will stay safe. Please click below to do that. 

It will only take a minute. Remember to use a Capital letter, a number and a minimum of 12 letters. 

Click here to Change your Password now (this will be a link) 

Sincerely, 

eBay Customer Service 

KnowBe4 argues, quite correctly, that the results will be: “Fabulous ammo to get more security budget, fun to do, AND you get to be proactive for a change!”

The reason for choosing eBay as the phishing subject is that after losing the account data for some 145 million customers at the end of February eBay actually did send out email messages to users that included a link to the password reset page. This was, of course, completely and utterly the wrong thing to do (as was waiting for a couple of months before telling users their accounts had been compromised but that’s a topic for another rant).

I really like the idea of testing your users’ gullibility and naiveté but be careful of how you follow up after the exercise; this should be a teaching opportunity, not a disciplinary exercise.

If you try this please let me know what you find (if you’d rather not publicly post below send a message to gearhead@gibbs.com). After that follow me on Twitter, App.net, and Facebook.

This story, “KnowBe4 offering a free phishing attack simulation” was originally published by
NetworkWorld
.

previous Previous Post

Sci-Fi that meets geek criteria … “Mis-Drop”

Next Post next

KnowBe4 extends free phishing simulation for NW readers

• We haven’t visited Apple OS X since Snow Leopard, and while there have been incremental changes,…

• You can’t see some malware until it’s too late. Sophisticated attacks arrive in pieces, each…

• Market research and analysis firms note ‘hesitation’ due to network transformation

The abrupt discontinuation of the disk and file encryption freeware TrueCrypt by its secretive software

Microsoft says that in some countries where its Surface Pro 2 tablet is not yet available, it never

Strength in social networking sales helps Microsoft; weaker telepresence, voice sales hurt Cisco.

A year ago, people were mostly talking about the potential of the Internet of Things (IoT) — what

The abrupt discontinuation of the disk and file encryption freeware TrueCrypt by its secretive software

• 
  NEW BUNDLE6 FIBER JUMPERS! 6X FASTER, 6X EASIER

<!–

Share this:

• Facebook
• X
• LinkedIn
• WhatsApp

Related