Abstract

PhishBait is a free web application that provides a phishing campaign guide, phishing email templates, training videos, quizzes, and a dashboard to view the results. Phishing is a dangerous form of social engineering frequently used in cyber-attacks by scammers. Due to a lack of awareness and training, businesses are losing vast amounts of money, theft of their intellectual property, and damage to their reputation in these cyber-attacks. PhishBait was designed to assist small-to-medium-sized businesses to educate their employees and help reduce the risks posed by phishing attacks. Currently, there is a lack of an easy-to-use, free, open-source platform that acts as a one-stop shop for guiding phishing campaigns and users' phishing awareness training. PhishBait fills this need, and in doing so, helps to mitigate security risks by facilitating user awareness, user training, and better-trained employees.