Systems and methods for end-user security awareness training for calendar-based threats
Systems and methods are described for providing calendar-based simulated phishing attacks to users of an organization. Initially, a context is identified for a calendar-based simulated phishing attack directed towards a user. An electronic calendar invitation for the calendar-based simulated phishing attack is then generated using the context. Thereafter, the electronic calendar invitation may be communicated to an electronic calendar of the user.
1. A method for providing a calendar-based simulated phishing attack, the method comprising:
identifying, by one or more hardware processors, a context for the calendar-based simulated phishing attack directed towards a user;
generating, by the one or more hardware processors using the context, an electronic calendar invitation to be communicated as the calendar-based simulated phishing attack;
communicating, by the one or more hardware processors, the calendar-based simulated phishing attack comprising the electronic calendar invitation to an electronic calendar of the user; and
detecting, by the one or more hardware processors, an interaction with the electronic calendar invitation by the user.
2. The method of claim 1 , further comprising determining, by the one or more processors, the context from information in one or more electronic calendars of the user.
3. The method of claim 1 , further comprising determining, by the one or more processors, the context from information about the user in one or more databases.
4. The method of claim 1 , further comprising determining, by the one or more processors, the context from information from one or more emails associated with the user or from one or more mailboxes of the user.
5. The method of claim 1 , further comprising determining, by the one or more processors, content to include in the electronic calendar invitation based at least on the context.
6. The method of claim 1 , further comprising determining, by the one or more processors, a timing of communicating the electronic calendar invitation based at least on the context.
7. The method of claim 1 , further comprising generating, by the one or more processors, the electronic calendar invitation with one or more exploits.
8. The method of claim 1 , wherein the interaction comprises one of: accepting the electronic calendar invitation, tentatively accepting the electronic calendar invitation, declining the electronic calendar invitation, proposing a new meeting time for the electronic calendar invitation, clicking on a link in the electronic calendar invitation, opening or downloading an attachment in the electronic calendar invitation, forwarding the electronic calendar invitation, or deleting the electronic calendar invitation.
9. The method of claim 8 , further comprising determining, by the one or more processors, a risk score for the user based at least on the detection.
10. The method of claim 8 , further comprising communicating, by the one or more processors, electronic training to the user based at least on the detection.
11. A system for providing a calendar-based simulated phishing attack, the system comprising:
one or more hardware processors, coupled to memory and configured to:
identify a context for the calendar-based simulated phishing attack directed towards a user;
generate, using the context, an electronic calendar invitation to be communicated as the calendar-based simulated phishing attack;
communicate the calendar-based simulated phishing attack comprising the electronic calendar invitation to an electronic calendar of the user; and
detect an interaction with the electronic calendar invitation by the user.
12. The system of claim 11 , wherein the one or more processors are further configured to determine the context from information in one or more electronic calendars of the user.
13. The system of claim 11 , wherein the one or more processors are further configured to determine the context from information about the user in one or more databases.
14. The system of claim 11 , wherein the one or more processors are further configured to determine the context from information from one or more emails associated with the user or from one or more mailboxes of the user.
15. The system of claim 11 , wherein the one or more processors are further configured to determine content to include in the electronic calendar invitation based at least on the context.
16. The system of claim 11 , wherein the one or more processors are further configured to determine a timing of communicating the electronic calendar invitation based at least on the context.
17. The system of claim 11 , wherein the one or more processors are further configured to generate the electronic calendar invitation with one or more exploits.
18. The system of claim 11 , wherein the interaction comprises one of: accepting the electronic calendar invitation, tentatively accepting the electronic calendar invitation, declining the electronic calendar invitation, proposing a new meeting time for the electronic calendar invitation, clicking on a link in the electronic calendar invitation, opening or downloading an attachment in the electronic calendar invitation, forwarding the electronic calendar invitation, or deleting the electronic calendar invitation.
19. The system of claim 18 , wherein the one or more processors are further configured to determine a risk score for the user based at least on the detection.
20. The system of claim 18 , wherein the one or more processors are further configured to communicate electronic training to the user based at least on the detection.