Educause Security Discussion mailing list archives

Re: Commercial phishing education


From: Bob Bayn <Bob.Bayn () USU EDU>
Date: Wed, 23 Jul 2008 08:46:45 -0600

Allison Dolan wrote:
A while back, there was discussion re: the IT dept sending fake
phishing email with the intent to help educate those who fell for
it...well, apparently there is a product that will do that...

http://www.informationweek.com/news/security/client/showArticle.jhtml?
articleID=209400255

Phish Your Colleagues With PhishMe

The software lets IT departments identify the most gullible message
recipients so that they can be made to understand the error of their
ways.
---------

Also  CMU has a phishing education game:  http://cups.cs.cmu.edu/
antiphishing_phil/

After local discussions and the wisdom of the list, we opted
against a fake phishing sting operation here and are embarking
on a more conventional awareness campaign.  CMU's antiphishing
phil is a great tool to increase URL awareness.

--
Bob Bayn  ride-a-bike (435)797-2396
Network Security Team coordinator
Office of Information Techology
Utah State University

Current thread: