Systems and methods for simulated phishing attacks involving message threads

1. A method comprising:

selecting, by a simulation system executing on one or more processors and configured to interface via one or more application programming interfaces (APIs) with an email system of an entity, an email thread from a plurality of email threads from the email system based at least on one or more parameters, the simulation system selecting the email thread to target a simulated phishing email;

identifying, by the simulation system using the one or more APIs, an email of the email thread from the email system for which to create a reply simulated phishing email from a user of one or more emails of the email thread; and

creating, by the simulation system, the reply simulated phishing email as a reply email to the email from the user, wherein the reply simulated phishing email comprises one or more display names identifying one or more non-recipient users of the email, the reply simulated phishing email being configured to prevent the reply simulated phishing email from being received by the one or more non-recipient users.

2. The method of claim 1 , further comprising identifying, by the simulation system, the one or more parameters configured in the simulation system for selecting the email thread.

3. The method of claim 1 , wherein the user is one of a recipient or a sender of the one or more emails of the email thread.

4. The method of claim 1 , wherein the reply simulated phishing email is further configured to display a correct name of the user but to use different email address of the user for routing any replies to the simulation system responsive to a recipient user replying to the reply simulated phishing email.

5. The method of claim 1 , wherein the reply simulated phishing email is further configured to display a correct name of the one or more non-recipient users but use a different email address of the one or more non-recipient users for routing any replies the simulation system responsive to a recipient user replying to the reply simulated phishing email.

6. The method of claim 1 , wherein the reply simulated phishing email is further configured to display a correct name of the one or more non-recipient users but use an incorrect email address for the one or more non-recipient users.

7. The method of claim 6 , wherein the incorrect email is a simulation system email address.

8. The method of claim 6 , wherein the incorrect email address is a variant of the correct email address of the one or more non-recipient users.

9. The method of claim 6 , wherein the incorrect email address is different from but mimics the correct email address of the one or more non-recipient users.

10. The method of claim 1 , wherein the simulation system is configured to not send the reply simulated phishing message to the email accounts of the one or more non-recipient users.

11. A system comprising:

a simulation system of one or more processors configured to interface via one or more application programming interfaces (APIs) with an email system of an entity and:

select an email thread from a plurality of email threads from the email system based at least on one or more parameters, the simulation system selecting the email thread to target a simulated phishing email;

identify, using the one or more APIs, an email of the email thread from the email system for which to create a reply simulated phishing email from a user of one or more emails of the email thread; and

create the reply simulated phishing email as a reply email to the email from the user, wherein the reply simulated phishing email comprises one or more display names identifying one or more non-recipient users of the email, the reply simulated phishing email being configured to prevent the reply simulated phishing email from being received by the one or more non-recipient users.

12. The system of claim 11 , wherein the simulation system is further configured to identify the one or more parameters configured in the simulation system for selecting the email thread.

13. The system of claim 11 , wherein the user that is one of a recipient or a sender of the one or more emails.

14. The system of claim 11 , wherein the reply simulated phishing email is further configured to display a correct name of the user but to use different email address of the user for routing any replies to the simulation system responsive to a recipient user replying to the reply simulated phishing email.

15. The system of claim 11 , wherein the reply simulated phishing email is further configured to display a correct name of the one or more non-recipient users but use a different email address of the one or more non-recipient users for routing any replies the simulation system responsive to a recipient user replying to the reply simulated phishing email.

16. The system of claim 11 , wherein the reply simulated phishing email is further configured to display a correct name of the one or more non-recipient users but use an incorrect email address for the one or more non-recipient users.

17. The system of claim 16 , wherein the incorrect email is a simulation system email address.

18. The system of claim 16 , wherein the incorrect email address is a variant of the correct email address of the one or more non-recipient users.

19. The system of claim 16 , wherein the incorrect email address is different from but mimics the correct email address of the one or more non-recipient users.

20. The system of claim 16 , wherein the simulation system is configured to not send the reply simulated phishing message to the email accounts of the one or more non-recipient users.