Systems and methods for creating and running heterogeneous phishing attack campaigns

1. A method for creating a plurality of different campaigns for different simulated phishing attacks, the method comprising:

(a) creating, by a campaign manager executing on a processor coupled to memory, a plurality of campaigns for simulated phishing attacks, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign, a time schedule for running the campaign and a type of exploit configured to collect a selection of one or more types of data, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a start date, a duration and a frequency for running the campaign;

(b) storing, by the campaign manager in a database, the plurality of campaigns and the associated identifier and plurality of parameters for each of the campaigns; and

(c) identifying, by a simulation server from the database, a first campaign and a second campaign from the plurality of campaigns from which to create (i) a first simulated phishing email using a first plurality of parameters of the first campaign with a first type of exploit to send on a first time schedule to corresponding email accounts of users of the first campaign, and (ii) a second simulated phishing email using a second plurality of parameters of the second campaign with a second type of exploit to send on a second time schedule, different than the first time schedule, to corresponding email accounts of users of the second campaign.

2. The method of claim 1 , wherein (a) further comprises setting, by the campaign manager as parameters of the plurality of parameters for each of the plurality of campaigns, a type of exploit and one or more types of data to collect via the type of exploit.

3. The method of claim 2 , wherein (c) further comprises identifying, by the simulation server from the database, the first campaign to create the first simulated phishing email with the type of exploit different from the type of exploit of the second simulated phishing email.

4. The method of claim 2 , wherein (c) further comprises identifying, by the simulation server from the database, the first campaign to create the first simulated phishing email with the one or more types of data to collect different from the one or more types of data of the second simulated phishing email.

5. The method of claim 1 , wherein (a) further comprises creating, by the campaign manager, for each of the plurality of campaigns the time schedule from a selection via a user interface of each of a start time, the duration and the frequency for running the campaign.

6. The method of claim 1 , wherein (a) further comprises setting, by the campaign manager as parameters of the plurality of parameters for each of the plurality of campaign, a user group for the identification of users.

7. The method of claim 6 , wherein (c) further comprises identifying, by the simulation server from the database, the first campaign to create with the user group different from the user group of the second campaign.

8. A system for creating a plurality of different campaigns for different simulated phishing attacks, the system comprising:

a campaign manager executable on a processor coupled to memory, configured to:

create a plurality of campaigns for simulated phishing attacks, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign a time schedule for running the campaign and a type of exploit configured to collect a selection of one or more types of data, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a start date, a duration and a frequency for running the campaign; and

store in a database, the plurality of campaigns and the associated identifier and plurality of parameters for each of the campaigns; and

a simulation server configured to identify from the database, a first campaign and a second campaign from the plurality of campaigns from which to create (i) a first simulated phishing email using a first plurality of parameters of the first campaign with a first type of exploit to send on a first time schedule to corresponding email accounts of users of the first campaign, and (ii) a second simulated phishing email with a second type of exploit using a second plurality of parameters of the second campaign to send on a second time schedule, different than the first time schedule, to corresponding email accounts of users of the second campaign.

9. The system of claim 8 , wherein the campaign manager is further configured to set as parameters of the plurality of parameters for each of the plurality of campaigns a type of exploit and one or more types of data to collect via the type of exploit.

10. The system of claim 9 , wherein the simulation server is further configured to identify, from the database, the first campaign to create the first simulated phishing email with the type of exploit different from the type of exploit of the second simulated phishing email.

11. The system of claim 9 , wherein the simulation server is further configured to identify, from the database, the first campaign to create the first simulated phishing email with the one or more types of data to collect different from the one or more types of data the second simulated phishing email.

12. The system of claim 8 , wherein the campaign manager is further configured to create for each of the plurality of campaigns the time schedule from a selection via a user interface of each of a start time, the duration and the frequency for running the campaign.

13. The system of claim 8 , wherein the campaign manager is further configured to set as parameters of the plurality of parameters for each of the plurality of campaign, a user group for the identification of users.

14. The system of claim 13 , wherein the simulation server is further configured to identify, from the database, the first campaign to create with the user group different from the user group of the second campaign.

15. A method for running a plurality of different campaigns for different simulated phishing attacks, the method comprising:

(a) establishing, by a campaign manager executing on a processor coupled to memory, a plurality of campaigns for simulated phishing attacks, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign time schedule for running the campaign and a type of exploit configured to collect a selection of one or more types of data, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a start date, a duration and a frequency for running the campaign;

(b) creating, by a simulation server responsive to a first campaign of the plurality of campaigns, a first simulated phishing email using a first plurality of parameters of the first campaign and a first type of exploit,

(c) creating, by the simulation server responsive to a second campaign of the plurality of campaigns, a second simulated phishing email using a second plurality of parameters of the second campaign and a second type of exploit; and

(d) communicating, by the simulation server, the first simulated phishing email to a first set of email accounts of a first group of users of a first campaign according to a first time schedule and the second simulated phishing email to a second set of email accounts of a second group of users of a second campaign according to a second time schedule.

16. The method of claim 15 , wherein (a) further comprises establishing, by the campaign manager as parameters of the plurality of parameters for each of the plurality of campaigns, a type of exploit and one or more types of data to collect via the type of exploit.

17. The method of claim 16 , wherein (b) further comprises creating, by the simulation server, the first simulated phishing email to have a link to a first landing page with the type of exploit different from the type of exploit of a second landing page linked to a second simulated phishing email.

18. The method of claim 17 , further comprising creating, by the simulation server, the first landing page to collect one or more types of data different from the type of data to collect for the second landing page.

19. The method of claim 15 , wherein (a) further comprises establishing, by the campaign manager, for each of the plurality of campaigns the time schedule from a selection via a user interface of each of a start time, the duration and the frequency for running the campaign.

20. The method of claim 19 , wherein (d) further comprises communicating, by the simulation server, the first simulated phishing email in accordance with one of a start time, a duration and a frequency of the first campaign and the second simulated phishing email in accordance with one of a start time, a duration and a frequency of the second campaign.

21. The method of claim 15 , wherein (d) further comprises communicating, by the simulation server, the first simulated phishing email on the first time schedule that overlaps with a least a portion of the second time schedule over which the second simulated phishing email is communicated.

22. A system for running a plurality of different campaigns for different simulated phishing attacks, the system comprising:

a campaign manager executable on a processor coupled to memory, configured to establish a plurality of campaigns for a simulated phishing attack, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign time schedule for running the campaign and a type of exploit configured to collect a selection of one or more types of data, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a start date, a duration and a frequency for running the campaign; and

a simulation server configured to create, responsive to a first campaign of the plurality of campaigns, a first simulated phishing email using a first plurality of parameters of the first campaign, and responsive to a second campaign of the plurality of campaigns, a second simulated phishing email using a second plurality of parameters of the second campaign; and

wherein the simulation server is configured to communicate the first simulated phishing email to a first set of email accounts of a first group of users of a first campaign according to a first time schedule and with a first type of exploit, and the second simulated phishing email to a second set of email accounts of a second group of users of a second campaign according to a second time schedule and with a second type of exploit.

23. The system of claim 22 , wherein the campaign manager is further configured to establish as parameters of the plurality of parameters for each of the plurality of campaigns, a type of exploit and one or more types of data to collect via the type of exploit.

24. The system of claim 23 , wherein the simulation server is further configured to create the first simulated phishing email to have a link to a first landing page with the type of exploit different from the type of exploit of a second landing page linked to a second simulated phishing email.

25. The system of claim 24 , wherein the simulation server is further configured to create the first landing page to collect one or more types of data different from the type of data to collect for the second landing page.

26. The system of claim 22 , wherein the campaign manager is further configured to establish for each of the plurality of campaigns the time schedule from a selection via a user interface of each of a start time, the duration and the frequency for running the campaign.

27. The system of claim 22 , wherein the simulation server is further configured to communicate the first simulated phishing email in accordance with one of a start time, a duration and a frequency of the first campaign and the second simulated phishing email in accordance with one of a start time, a duration and a frequency of the second campaign.

28. The system of claim 22 , wherein the simulation server is further configured to communicate the first simulated phishing email on the first time schedule that overlaps with a least a portion of the second time schedule over which the second simulated phishing email is communicated.