US 11,108,821 B2Granted

Systems and methods for use of address fields in a simulated phishing attack

AssigneeKnowBe4, Inc.

InventorsJasmine Rodriguez, Daniel Cormier

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are disclosed for creating simulated phishing attack messages that have characteristics which make them appear genuine, while also having characteristics that a user should recognize as being false. Simulated phishing emails may appear to be more realistic to a recipient user if the user observes that the email has also been sent to an individual known to the recipient within the same company. However, it may not be desirable to send the simulated phishing email to such additional recipients. The systems and methods include communicating a simulated phishing email from a server of a simulated phishing attack system to a recipient user of an entity. The simulated phishing email appears to the recipient user as though it is also addressed to one or more non-recipient users of the entity, even though the email is not sent to the non-recipient users.

Claims12

Dependent claims

A method comprising:

(a) generating, by a server for a recipient user of an entity to be targeted with a simulated phishing email, one or more email addresses of one or more non-recipient users to be displayed as recipients of the simulated phishing email when received by the recipient user;
(b) generating, by the server, the simulated phishing email addressed via one or more address fields to the recipient user and the one or more non-recipient users;
(c) initiating, by the server, transmission of the simulated phishing email to a mail server of the entity;
(d) communicating, by the server, a RCPT TO command of a simple mail transfer protocol (SMTP) to the mail server to include the recipient user as the recipient of the simulated phishing email and to exclude the one or more non-recipient users as recipients of the simulated phishing email;
and
(e) communicating, by the server, via a DATA command of the SMTP with the mail server, the one or more email addresses of the one or more non-recipient users with content of the simulated phishing email to the recipient user to cause the simulated phishing email to be displayed to the recipient user with the one or more email addresses of the one or more non-recipient users as recipients of the simulated phishing email in order to give appearance to the recipient user that the simulated phishing email was communicated to the one or more non-recipient users that were excluded from the RCPT TO command.

3 more elements

A system comprising:

a server comprising one or more processors, coupled to memory and configured to:
generate, for a recipient user of an entity to be targeted with a simulated phishing email, one or more email addresses of one or more non-recipient users to be displayed as recipients with the simulated phishing email to be received by the recipient user;
generate the simulated phishing email addressed to the recipient user and the one or more non-recipient users;
initiate transmission of the simulated phishing email to a mail server of the entity;
communicate a RCPT TO command of a simple mail transfer protocol (SMTP) to the mail server to include the recipient user as the recipient of the simulated phishing email and to exclude the one or more non-recipient users as recipients of the simulated phishing email;
and
communicate via a DATA command of the SMTP with the mail server, the one or more email addresses of the one or more non-recipient users with content of the simulated phishing email to the recipient user to cause the simulated phishing email to be displayed to the user with the one or more email addresses of the one or more non-recipient users as recipients of the simulated phishing email in order to give appearance to the recipient user that the simulated phishing email was communicated to the one or more non-recipient users that were excluded from the RCPT TO command.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/860,689Filed 28 Apr 2020 · us provisional application
Priority: 1 May 2019
Published: US 2020/0366713 A119 Nov 2020
Granted: 31 Aug 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

G09B 5/00
Electrically-operated educational appliances
H04L 63/1483
Countermeasures against malicious traffic: service impersonation, e.g. phishing, pharming or web spoofing
G09B 19/0053
Teaching not covered by other main groups of this subclass: computers, e.g. programming
H04L 51/08
Characterised by the inclusion of specific contents: annexed information, e.g. attachments