IP Library Granted Patent US 10,581,912
Granted Patent B2
US 10,581,912 · App. 16/229,905 · Granted Mar 3, 2020

Systems and methods for performing simulated phishing attacks using social engineering indicators

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,581,912
App. No.
16/229,905
Granted
Mar 3, 2020
Kind
B2
Abstract

Systems and methods are provided for performing simulated phishing attacks using social engineering indicators. One or more failure indicators can be configured in a phishing email template, and each failure indicator can be assigned a description about that failure indicator through use of a markup tag. The phishing email template containing the markup tags corresponding to the failure indicators can be stored and can be used to generate a simulated phishing email in which the one or more markup tags are removed.

Claims (33)

1. A method comprising:

a) identifying a phishing email template from a plurality of phishing email templates for configuring a simulated phishing email;

b) receiving, via an editing tool, specification of one or more social engineering indicators to be configured in the phishing email template, each of the one or more social engineering indicators assigned a flag, wherein a social engineering indicator of the one or more social engineering indicators is configured to be displayed in one of a pop up box or an overlay;

c) generating in the phishing email template by the editing tool, one or more markup tags for each of the one or more social engineering indicators, describing how to identify that type of social engineering indicator;

d) storing, by the editing tool, source code of the phishing email template with the one or more markup tags corresponding to the one or more social engineering indicators; and

e) generating, by the editing tool, a simulated phishing email to be sent to one or more email accounts based on the phishing email template without the one or more markup tags identifying to a recipient that the simulated phishing email is a simulated phishing attack.

2. The method of claim 1 , wherein (a) further comprises receiving a selection, via the editing tool, to create a custom phishing email template.

3. The method of claim 1 , wherein the one or more social engineering indicators is selected from one or more of the following categories: sender's name or email address, subject, content, attachment, link and overall.

4. The method of claim 1 , wherein (c) further comprises generating the markup tag to be included in one of a field of the phishing email template or a body of the phishing email template.

5. The method of claim 1 , wherein (c) further comprises generating the markup tag to encapsulate one of text or an image.

6. The method of claim 1 , wherein (c) further comprises generating the markup tag to be a hypertext markup language tag.

7. The method of claim 1 , wherein (e) further comprises associating the simulated phishing email with the stored phishing email template.

8. The method of claim 1 , wherein (e) further comprises generating the simulated phishing email to include a link to a display of a copy of the simulated phishing email based on the phishing email template, with the one or more markup tags shown.

9. The method of claim 8 , wherein the copy of the simulated phishing email is further configured to display the one or more social engineering indicators of the simulated phishing email template in one of a pop-up box or overlay user interface.

10. The method of claim 1 , wherein the simulated phishing email is further configured not to display the one or more social engineering indicators.

11. A system comprising:

an editing tool executable on a processor, coupled to memory and configured to:

identify a phishing email template from a plurality of phishing email templates for configuring a simulated phishing email and specification of one or more social engineering indicators to be configured in a phishing email template,

wherein each of the one or more social engineering indicators assigned a flag and a description on how to identify that type of social engineering indicator,

wherein a social engineering indicator of the one or more social engineering indicators is configured to be displayed in one of a pop up box or overlay user interface;

wherein the editing tool is configured to:

generate a markup tag that is included in the phishing email template for each of the one or more social engineering indicators, the markup tag comprising a description assigned to a social engineering indicator;

store source code of the phishing email template with one or more markup tags corresponding to the one or more social engineering indicators; and

generate a simulated phishing email to be sent to one or more email accounts based on the phishing email template and avoid identifying to a recipient that the simulated phishing email is a simulated phishing attack by removing the one or more markup tags.

12. The system of claim 11 , wherein the editing tool is further configured to create a custom phishing email template.

13. The system of claim 11 , wherein the flag for the one or more social engineering indicators is selected from one or more of the following categories: sender's name or email address, subject, content, attachment, link, and overall.

14. The system of claim 11 , wherein the markup tag is generated to be included in one of a field of the phishing email template or a body of the phishing email template.

15. The system of claim 11 , wherein the markup tag is further configured to encapsulate one of text or an image.

16. The system of claim 11 , wherein the markup tag comprises a hypertext markup language tag.

17. The system of claim 11 , wherein the simulated phishing email is associated with the stored phishing email template.

18. The system of claim 11 , where in the simulated phishing email includes a link to a uniform resource locator comprising a display of a copy of the simulated phishing email, based on the phishing email template, with one or more markup tags shown.

19. The system of claim 18 , wherein the copy of the simulated phishing email is further configured to display the one or more social engineering indicators of the phishing email template in one of a pop up box or overlay user interface.

20. The system of claim 11 , wherein the simulated phishing email is further configured to display the one or more social engineering indicators.

Assignments (6)
PATENT SECURITY AGREEMENT Recorded Aug 8, 2025
From: KNOWBE4, INC.
To: JPMORGAN CHASE BANK, N.A., AS COLLATERAL AGENT
Reel/Frame 072337/0277 →
RELEASE OF SECURITY INTEREST IN PATENT COLLATERAL RECORDED AT REEL/FRAME: 062627/0001 Recorded Jul 28, 2025
From: BLUE OWL CREDIT INCOME CORP. (FORMERLY KNOWN AS OWL ROCK CORE INCOME CORP.)
To: KNOWBE4, INC.
Reel/Frame 072108/0205 →
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS RECORDED AT REEL/FRAME NO.: 056885/0889 Recorded Feb 2, 2023
From: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
To: KNOWBE4, INC.
Reel/Frame 062625/0841 →
PATENT SECURITY AGREEMENT Recorded Feb 2, 2023
From: KNOWBE4, INC.
To: OWL ROCK CORE INCOME CORP., AS COLLATERAL AGENT
Reel/Frame 062627/0001 →
NOTICE OF GRANT OF SECURITY INTEREST IN PATENTS Recorded Mar 12, 2021
From: KNOWBE4, INC.
To: BANK OF AMERICA, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 056885/0889 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 16, 2020
From: IRIMIE, ALIN; KRAS, GREG; AUSTIN, DAVID; DALTON, BENJAMIN
To: KNOWBE4, INC.
Reel/Frame 054664/0954 →