Systems and methods for creating and running heterogeneous phishing attack campaigns

A system for creating a plurality of different campaigns for different simulated phishing attacks, the system comprising:

• a campaign manager executable on a processor coupled to memory, configured to:
• create a plurality of campaigns for simulated phishing attacks, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign and a time schedule for running the campaign, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a duration for running the campaign;
• and
• store in a database, the plurality of campaigns and the associated identifier and plurality of parameters for each of the campaigns;
• and
• a simulation server configured to identify from the database, a first campaign and a second campaign from the plurality of campaigns from which to create (i) a first simulated phishing email using a first plurality of parameters of the first campaign to send on a first time schedule to corresponding email accounts of users of the first campaign, and (ii) a second simulated phishing email using a second plurality of parameters of the second campaign to send on a second time schedule, different than the first time schedule, to corresponding email accounts of users of the second campaign.

A method for running a plurality of different campaigns for different simulated phishing attacks, the method comprising:

• (a) establishing, by a campaign manager executing on a processor coupled to memory, a plurality of campaigns for simulated phishing attacks, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign and a time schedule for running the campaign, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a duration for running the campaign;
• (b) creating, by a simulation server responsive to a first campaign of the plurality of campaigns, a first simulated phishing email using a first plurality of parameters of the first campaign,
• (c) creating, by the simulation server responsive to a second campaign of the plurality of campaigns, a second simulated phishing email using a second plurality of parameters of the second campaign;
• and
• (d) communicating, by the simulation server, the first simulated phishing email to a first set of email accounts of a first group of users of a first campaign according to a first time schedule and the second simulated phishing email to a second set of email accounts of a second group of users of a second campaign according to a second time schedule.

A system for running a plurality of different campaigns for different simulated phishing attacks, the system comprising:

• a campaign manager executable on a processor coupled to memory, configured to establish a plurality of campaigns for a simulated phishing attack, each of the plurality of campaigns having a plurality of parameters including at least an identifier of a campaign, identification of users to which to send the campaign and a time schedule for running the campaign, each of the plurality of campaigns having at least one parameter of the plurality of parameters different than other campaigns of the plurality of campaigns, wherein the time schedule comprises a duration for running the campaign;
• and
• a simulation server configured to create, responsive to a first campaign of the plurality of campaigns, a first simulated phishing email using a first plurality of parameters of the first campaign, and responsive to a second campaign of the plurality of campaigns, a second simulated phishing email using a second plurality of parameters of the second campaign;
• and
• wherein the simulation server is configured to communicate the first simulated phishing email to a first set of email accounts of a first group of users of a first campaign according to a first time schedule and the second simulated phishing email to a second set of email accounts of a second group of users of a second campaign according to a second time schedule.