Systems and methods for security awareness using ad-based simulated phishing attacks

1. A method of modifying one or more advertisements of a webpage or a social media feed to create a simulated phishing attack, the method comprising:

receiving, by one or more processors, content responsive to a request by a user via a user device, the content comprising one of a webpage or a social media feed with one or more advertisements;

detecting, by the one or more processors, the one or more advertisements within the content;

determining, by the one or more processors, an advertisement of the one or more advertisements within the received content to modify to provide simulated phishing attack content;

modifying, by the one or more processors, the advertisement to include the simulated phishing attack content; and

forwarding, by the one or more processors, the content with the modified advertisement to the user device responsive to the request by the user.

2. The method of claim 1 , further comprising intercepting, by the one or more processors, the content prior to presenting the content via the user device to the user.

3. The method of claim 1 , further comprising tracking, by the one or more processors, an action by the user with respect to the modified advertisement.

4. The method of claim 1 , further comprising establishing, by the one or more processors, a risk score of the user based at least an action by the user with respect to the modified advertisement.

5. The method of claim 1 , further comprising modifying, by the one or more processors, the advertisement to comprise one or more elements to pass through an ad blocker.

6. The method of claim 1 , further comprising modifying, by the one or more processors, the advertisement by replacing the advertisement with the simulated phishing attack content in a form of an advertisement.

7. The method of claim 1 , further comprising forwarding, by the one or more processors, the content with the modified advertisement and at least one genuine advertisement.

8. The method of claim 1 , further comprising causing, by the one or more processors, traversal to a landing page to provide description of one of a security exploit or an action by the user with respect to the modified advertisement.

9. The method of claim 1 , further comprising causing, by the one or more processors, traversal to training content responsive to the user's interaction with the modified advertisement.

10. The method of claim 1 , wherein the one or more processors are on one of the user device or a server.

11. A system of modifying one or more advertisements of a webpage or a social media feed to create a simulated phishing attack, the system comprising:

one or more processors, coupled to memory and configured to:

receive content responsive to a request by a user via a user device,

wherein the content comprises one of a webpage or a social media feed with one or more advertisements; and

wherein the one or more processors are configured to:

detect the one or more advertisements within the content;

determine an advertisement of the one or more advertisements within the received content to modify to provide simulated phishing attack content;

modify the advertisement to include the simulated phishing attack content; and

forward the content with the modified advertisement to the user device responsive to the request by the user.

12. The system of claim 11 , wherein the one or more processors are further configured to intercept the content prior to presenting the content via the user device to the user.

13. The system of claim 11 , wherein the one or more processors are further configured to track an action by the user with respect to the modified advertisement.

14. The system of claim 11 , wherein the one or more processors are further configured to establish a risk score of the user based at least an action by the user with respect to the modified advertisement.

15. The system of claim 11 , wherein the one or more processors are further configured to modify the advertisement to include one or more elements to pass through an ad blocker.

16. The system of claim 11 , wherein the one or more processors are further configured to modify the advertisement by replacing the advertisement with the simulated phishing attack content in a form of an advertisement.

17. The system of claim 11 , wherein the one or more processors are further configured to forward the content with the modified advertisement and at least one genuine advertisement.

18. The system of claim 11 , wherein the one or more processors are further configured to cause traversal to one of training content or a landing page to provide description of one of a security exploit or an action by the user with respect to the modified advertisement.

19. The system of claim 11 , wherein the one or more processors are on one of the user device or a server.

20. A system of inserting into a webpage or a social media feed, a simulated phishing attack content in a form of an advertisement, the system comprising:

one or more processors, coupled to memory and configured to:

receive content responsive to a request by a user via a user device, wherein the content comprises one of a webpage or a social media feed; and

wherein the one or more processors are configured to:

determine an advertisement within the received content to include in the content to provide a simulated phishing attack content;

modify the content to include the simulated phishing attack content in a form of the advertisement; and

forward the content with the inserted advertisement to the user device responsive to the request by the user.