Systems and methods for performing a simulated phishing attack

A system for identifying users that reply to a simulated phishing email, the system comprising:

• one or more servers comprising one or more processors coupled to memory, and configured to establish a unique identifier for each user of a plurality of users;
• a campaign manager of the one or more servers configured to the unique identifier of a user in a simulated phishing email to be communicated to that user, the simulated phishing email comprising an email address in a to field that corresponds to the one or more servers;
• and
• wherein the one or more servers are configured to receive a reply email to the email address communicated responsive to the simulated phishing email being communicated to the email account of at least one user of the plurality of users, the reply email comprising the unique identifier;
• and
• wherein the campaign manager is configured to determine a user has replied to the simulated phishing email by identifying the unique identifier embedded in the reply email as the unique identifier established by the one or more servers for the user.

A method for identifying users that reply to a simulated phishing email, the method comprising:

• (a) establishing, by one or more servers comprising a processor coupled to memory, a unique identifier for each user of a plurality of users;
• (b) embedding, by the one or more servers, the unique identifier of a user in an email address of a plurality of address fields of a simulated phishing email to be communicated to that user;
• (c) receiving, by the one or more servers, responsive to the simulated phishing email being communicated to the email account of a user of the plurality of users, a reply email comprising the unique identifier in at least one email address field of the plurality of address fields;
• and
• (d) determining by the one or more servers, that the user has replied to the simulated phishing email by identifying the unique identifier embedded in the at least one address field of the plurality of address fields of the reply as to the unique identifier established by the one or more servers for the user.

A system for identifying users that reply to a simulated phishing email, the system comprising:

• one or more servers comprising a processor coupled to memory and configured to establish a unique identifier for each user of a plurality of users;
• a campaign manager of the one or more servers configured to embed the unique identifier of a user in an email address of a plurality of address fields of a simulated phishing email to be communicated to that user;
• wherein the one or more servers are configured to receive, responsive to the simulated phishing email being communicated to the email account of a user of the plurality of users, a reply email comprising the unique identifier in at least one email address field of the plurality of address fields;
• and
• determine that the user has replied to the simulated phishing email by identifying the unique identifier embedded in the at least one address field of the plurality of address fields of the reply as to the unique identifier established by the one or more servers for the user.