Abstract

Phishy is a platform used to help security administrators launch several simultaneous, simulated phishing campaigns to gauge and improve the phishing awareness of employees within their organization. In 2019, almost 90% of organizations were faced with targeted phishing attacks1. According to a survey conducted by Proofpoint, nearly 80% of organizations reported improvements in phishing susceptibility after enrolling users in security awareness training1. We designed Phishy to help combat the major phishing problem companies face today and help better educate employees on the dangers of phishing. Currently, there is not an open source platform that acts as a “one stop shop” for managing phishing campaigns and user's phishing awareness training. Phishy fills this need by helping its users launch realistic phishing campaigns, providing live data analytics, and enrolling users into specific phishing awareness training based on their interactions with the phishing simulation.