Simulated phishing attack with sequential messages

A network device, comprising:

• a processor;
• a storage device connected to the processor;
• and
• a set of instructions on the storage device that, when executed by the processor, cause the processor to:
• conduct a simulated phishing attack, the simulated attack comprising:
• transmitting a first message to at least one of one or more computing devices of an individual, the first message being disguised as originating from at least one of one or more trustworthy contacts of the individual and notifying the individual that the individual should expect to receive a second message;
• and
• after transmitting the first message, transmitting the second message to the at least one of the one or more computing devices of the individual, the second message also being disguised as originating from at least one of the one or more trustworthy contacts of the individual and attempting to lure the individual into performing, on at least one of the one or more computing device, a target action associated with the second message,
• wherein if the individual performs the target action, the simulated phishing attack does not actually compromise any personal information or any one of the one or more computing devices of the individual;
• and
• monitor whether the individual performs the target action on at least one of the one or more computing devices.

A non-transitory machine-readable storage medium comprising software instructions that, when executed by a processor, cause the processor to:

• conduct a simulated phishing attack, the simulated attack comprising:
• transmitting a first message to at least one of one or more computing devices of an individual, the first message being disguised as originating from at least one of one or more trustworthy contacts of the individual and notifying the individual that the individual should expect to receive a second message;
• and
• after transmitting the first message, transmitting the second message to at least one of the one or more computing devices of the individual, the second message also being disguised as originating from at least one of the one or more trustworthy contacts of the individual and attempting to lure the individual into performing, on at least one of the one or more computing devices, a target action associated with the second message,
• wherein if the individual performs the target action, the simulated phishing attack does not actually compromise any personal information or any one of the one or more computing devices of the individual;
• and
• monitor whether the individual performs the target action on at least one of the one or more computing devices.

A network device, comprising:

• a processor;
• a storage device connected to the processor;
• and
• a set of instructions on the storage device that, when executed by the processor, cause the processor to:
• conduct a simulated phishing attack, the simulated attack comprising:
• transmitting a first message to at least one of one or more computing devices of an individual, the first message being disguised as originating from at least one of one or more trustworthy contacts of the individual and attempting to lure the individual into performing, on the at least one of the one or more computing devices, a target action associated with the first message;
• and
• after transmitting the first message, transmitting a second message to at least one of the one or more computing devices of the individual, the second message also being disguised as originating from at least one of the one or more trustworthy contacts of the individual and encouraging the individual to perform the target action on at least one of the one or more computing devices,
• wherein if the individual performs the target action, the simulated phishing attack does not actually compromise any personal information or any one of the one or more computing devices of the individual;
• and
• monitor whether the individual performs the target action on at least one of the one or more computing devices.

A non-transitory machine-readable storage medium comprising software instructions that, when executed by a processor, cause the processor to:

• conduct a simulated phishing attack, the simulated attack comprising:
• transmitting a first message to at least one of one or more computing devices of an individual, the first message being disguised as originating from at least one of one or more trustworthy contacts of the individual and attempting to lure the individual into performing, on at least one of the one or more computing devices, a target action associated with the first message;
• and
• after transmitting the first message, transmitting a second message to at least one of the one or more computing devices of the individual, the second message also being disguised as originating from at least one of the one or more trustworthy contacts of the individual and encouraging the individual to perform the target action on at least one of the one or more computing devices,
• wherein if the individual performs the target action, the simulated phishing attack does not actually compromise any personal information or any one of the one or more computing devices of the individual;
• and
• monitor whether the individual performs the target action on at least one of the one or more computing devices.

A method, comprising:

• conducting a simulated phishing attack, the simulated attack comprising:
• transmitting a first message to at least one of one or more computing devices of an individual, the first message (i) referencing a second message that the individual should expect to receive after the first message, (ii) being disguised as originating from at least one of one or more trustworthy contacts of the individual, and (iii) attempting to lure the individual into performing, on at least one of the one or more computing devices, a first target action that is associated with the first message;
• and
• after transmitting the first message, transmitting the second message to at least one of the one or more computing devices of the individual, the second message also being disguised as originating from at least one of the one or more trustworthy contacts of the individual and attempting to lure the individual into performing, on at least one of the one or more computing devices, a second target action this is associated with the second message,
• wherein if the individual performs one or more of the first target action and the second target action, the simulated phishing attack does not actually compromise any personal information or any one of the one or more computing devices of the individual;
• and
• monitoring whether the individual performs at least one of the first and second target actions on at least one of the one or more computing devices.