Creating and Managing Callback Phishing Campaigns

If you're a Diamond-level customer, you can use callback phishing campaigns to allow you to see how likely users are to call unknown phone numbers and share sensitive information. With these campaigns, you can help prepare your users for real callback phishing attacks, also known as reverse vishing attacks. In these campaigns, users will receive an email with a phone number and a callback code. If they call the phone number, they'll be prompted to enter the callback code. Once they enter the callback code, they'll be asked to enter personal information.

To learn more about callback phishing, click the links below.

Jump to:

Creating a Callback Phishing Campaign

Managing Callback Phishing Campaigns

Creating a Callback Phishing Campaign

To create a callback phishing campaign, go to your KMAST console and navigate to Phishing > Callback Phishing. Then, click + Create Callback Phishing Campaign. On the New Callback Phishing Campaign page, you can customize your callback phishing campaign.

For more information about the New Callback Phishing Campaign page, see the screenshot and list below:

1. Campaign Name: Enter a name for your callback phishing campaign. This is a required field.
2. Send to: Select which users you would like to receive a callback phishing test. You can select either All Users or Specific Groups. If you choose Specific Groups, you must select a group from the drop-down menu. This is a required field.
3. Start Time: Set the date, time, and time zone you would like your callback phishing campaign to start. Your default time zone is the one set in your Account Settings.
4. Sending Period: Select when to start sending callback phishing tests. You can choose to send all of the emails at once or over a period of time. For more information about the available options, see below:
   • Send all emails when the campaign starts: If you select this option, callback phishing tests will be sent to all selected users when the campaign starts. Users will not receive the email at the same time, but they will receive it on the same day.
   • Send emails over…: If you select this option, callback phishing tests will be sent to users at random during the time period selected. You can enter a number between one and four and pick business days, weeks, or months. For more information about sending and tracking periods, see our How to Monitor and Review Phishing Campaigns article.
5. Define Business Days and Hours: By default, your campaign will only send emails during the business hours set in your Account Settings. You can change the hours when your emails are sent by entering a start and end time in this field. You can also choose what days you would like emails to be sent by selecting the date check boxes.
6. Track Activity: Select how long you would like to track phishing failures after the sending period ends. You can enter a number between one and four and choose from either days, weeks, or months.
   Your KMSAT console will track activity until the campaign’s end date. The campaign’s end date is a combination of three values: the date of the first email, the sending duration, and the tracking duration. For more information about these values, see below:
   • Date of the first email: This value represents the date, in Eastern Time (US & Canada), of the first email sent during the callback phishing campaign.
   • Sending duration: This value represents the period of time that your callback phishing campaign emails were all sent.
   • Tracking duration: This represents the period of time when your KMSAT console will track emails from your callback phishing campaign.
   For more information about sending and tracking periods, see our How to Monitor and Review Phishing Campaigns article.
7. Template Topics: Select the type of callback phishing template you want to send. You can select one or more phishing template topics from the first drop-down menu. This is a required field.
8. Difficulty Rating: Select the difficulty rating for your callback phishing campaign. For more information about difficulty levels, see our What Are Template Difficulty Ratings and How Can I Use Them? article.
9. Template Selection: Select the specific callback phishing template you want to send. Full Random is selected by default. For more information, see our Automated Template Selection article.
10. Greeting Template: Select the greeting template you want to send. This will be the audio message that your users hear if they call the phone number in the email. For more information on callback phishing templates, see our How to Create and Edit Callback Phishing Templates article. 
11. Phone Number Region: Select the phone number region that will be added to the phone number in your callback phishing emails.
12. Add Callback Failures to: Select a user group you want to add your users to if they fail a callback phishing test. You can then enroll the user group in remedial training. For more information about setting up remedial training, see our How to Set Up a Remedial Training Campaign article.
    Note: Applying any changes to this field will affect the next callback phishing campaign. Users who failed callback phishing tests before this change will not be added to the newly selected group.
13. Store full number users call from: Select this check box to store the full phone number used to call the callback phishing number. This setting can help you verify that the user called. This feature is disabled by default. If you do not enable this setting, your KMSAT console will only store the area code associated with the phone number.
14. Send an email report to account admins after each phishing test: Select this check box to automatically send a report to all account admins when a callback phishing test ends. The reports include metrics such as Phish-prone Percentage, callback failures, and more.

Once you’ve finished customizing your callback phishing campaign, click Create Campaign to save all changes.

Back to top

Managing Callback Phishing Campaigns

To manage your phishing campaigns, go to your KMAST console and navigate to Phishing > Callback Phishing > Campaigns.

On the Callback Phishing Campaigns page, you can view and edit your campaign details. For more information about the Callback Phishing Campaigns page, see the screenshot and list below:

1. Filters: You can use these filters to sort campaigns by Active, Inactive, or All.
2. Campaign table: In this table, you can find a list of campaigns sorted by the Started At date, with the most recent campaign displaying at the top of the table. You can see each campaign’s groups, Phish-prone Percentage, when the campaign started, the campaign status, and the duration of the campaign.
3. Name: Click the campaign’s name to view details about it. For more information, see our How to Monitor and Review Phishing Campaigns article.
4. Status: This column displays the campaign’s status. The status can be Created, Pending, Active, Closed, or Error:
   • Created: The campaign is created but is not currently active. For one-time phishing campaigns, Created indicates that the campaign is scheduled to start.
   • Pending: The callback phishing campaign is scheduled and waiting to be sent.
   • Active: The callback phishing campaign is ongoing.
   • Closed: The campaign is inactive. If the campaign is in the Active subtab and has the Closed status, the campaign is temporarily inactive until the next PST begins. If the campaign is in the Inactive subtab and has a Closed status, either the campaign had a one-time frequency and ended, or the campaign was manually deactivated by an admin.
5. Duration: This column displays the campaign’s duration. The duration will either be Sending or Tracking:
   • Sending: Your campaign is sending out callback phishing emails.
   • Tracking: Your campaign is tracking user information.
6. Actions: Click the drop-down arrow in this column to edit, clone, deactivate, or delete a campaign. For more information about these options, see below:
   • Edit: This option opens the Edit Callback Phishing Campaign page. You can adjust your campaign as needed and click Update Campaign to save your changes. Options that are grayed out cannot be changed.
   • Clone: You can click this option to create a copy of an existing campaign. Your cloned campaign will have the same settings, except for a new start time and the word "Clone" in the campaign name. You can edit the campaign to remove the word “Clone.”
   • Deactivate: You can click this option to stop your campaign from running.
     Important: Once a campaign is deactivated, it cannot be reactivated.
   • Delete: You can click this option to permanently delete a campaign and all data, including recipients, failures, reports, and more. This action can’t be undone.

Back to top