Identification of Vulnerability to Social Phishing

A system comprising:

• one or more processing devices;
• and
• one or more non-transitory computer-readable media coupled to the one or more processing devices having instructions stored thereon which, when executed by the one or more processing devices, cause the one or more processing devices to perform operations comprising:
• generating, by a phishing engine, a hyperlink targeting a Uniform Resource Locator (URL);
• communicating, by the phishing engine, the generated hyperlink to one or more social entities;
• detecting, by the phishing engine, a selection of the generated hyperlink by a subset of the one or more social entities across one or more social networks;
• generating, by a report generator, a report that includes analytical details regarding the selection of the generated hyperlink by the subset of the one or more social entities;
• determining, by the phishing engine, a vulnerability score for a protected social entity that is based on a probability of the protected social entity selecting the generated hyperlink and reflects the protected social entity's vulnerability to external threats, wherein the vulnerability score for the protected social entity is a weighted average of one or more vulnerability assessment ratings;
• comparing the vulnerability score for the protected social entity to a vulnerability threshold;
• based on comparing the vulnerability score to the vulnerability threshold, determining that the vulnerability score exceeds the vulnerability threshold;
• based on determining that the vulnerability score exceeds the threshold, generating an alert;
• and
• providing, by the phishing engine, for output through the vulnerability management platform, the alert to a user associated with the protected social entity.

A non-transitory computer-readable storage medium encoded with a computer program, the program comprising instructions that when executed by a data processing apparatus cause the data processing apparatus to perform operations comprising:

• generating, by a phishing engine, a hyperlink targeting a Uniform Resource Locator (URL);
• communicating, by the phishing engine, the generated hyperlink to one or more social entities;
• detecting, by the phishing engine, a selection of the generated hyperlink by a subset of the one or more social entities across one or more social networks;
• generating, by a report generator, a report that includes analytical details regarding the selection of the generated hyperlink by the subset of the one or more social entities;
• determining, by the phishing engine, a vulnerability score for a protected social entity that is based on a probability of the protected social entity selecting the generated hyperlink and reflects the protected social entity's vulnerability to external threats, wherein the vulnerability score for the protected social entity is a weighted average of one or more vulnerability assessment ratings;
• comparing the vulnerability score for the protected social entity to a vulnerability threshold;
• based on comparing the vulnerability score to the vulnerability threshold, determining that the vulnerability score exceeds the vulnerability threshold;
• based on determining that the vulnerability score exceeds the threshold, generating an alert;
• and
• providing, by the phishing engine, for output through the vulnerability management platform, the alert to a user associated with the protected social entity.