Engage - Multi-Stage Phishing Templates

This feature is available for Engage Core and Engage Pro.

This article explains how to use Multi-stage Translated Phishing Templates and is intended for Administrators.

Introduction

Multi-stage Phishing attacks are sophisticated threats that typically involve multiple steps and are designed to bypass security detection. Attackers often use initial landing pages with embedded links, human verification (captcha) pages, and additional layers to prevent automated scanning. These campaigns usually send notifications that appear to originate from trusted services, prompting recipients to click on links that look legitimate. The links then guide users through multiple steps, which may include submitting email addresses, passwords, and multi-factor authentication codes on convincing fake login pages. The goal is to steal credentials and potentially session cookies.

Multi-stage Translated Phishing Templates allow you to add a Phishing Form to existing phishing templates. 
You will be able to see if an end-user has clicked on a simulation URL, and then proceeded to enter data into the phishing form. This will show up in reporting tables as Submitted.

Create a Multi-Stage Phishing Template

You can create a Multi-Stage Translated Phishing Template, by using the following steps:

1. Log in to Engage.
2. Navigate to Phishing Training | Template Library | Translated Templates.
3. Click Customize next to the template, to begin editing your Multi-Stage template.
4. Edit the template as required. 
5. Click on Add Phishing Form.

Once a Phishing Form has been added to a template, it cannot be removed.

5. Click on Upload a Logo to insert an image.
6. Click Insert Background Image to upload an image to form part of the phishing form. This will open an editor to allow you to crop and make edits to its fit.
7. Toggle the Header switch to add your text.
8. Edit the Field Types and associated labels.

 

8. Toggle the Footer switch to add your text.
9. If required, edit the Button Label.
10. Use the Colors option to edit the colors of the following components:

• Button.
• Form.
• Background.
• Text.

11. Once complete, select the Email Message tab to make any final changes. If the Save button is not active, make sure all required fields (marked with an asterisk *) in the Email Message template are completed, including Display Name and Category.
12. Click on Save. The template will be saved in the My Templates tab, where you can Edit or Copy the template if desired. 

If you are configuring a phishing simulation and the configuration side panel collapses and removes your changes when you click away, we recommend completing all modifications in one continuous session, saving frequently, and avoiding navigating away from the configuration panel before saving. If the issue persists, contact Mimecast Support.