Trust the Phish
Use Cases and Deployment Scope
I used to use PhishingBox when I worked for Lowe's Companies. We had a large number of issues corporate wide of fake vendors reaching out and sending links to products that would affect the network if clicked on. There wasn't enough education around what was fishy and what was legitimate depending on what area you worked in. Clicking these would obviously caused problems so they incorporated PhishingBox and some extra education around what should be clicked on vs not.
Pros
- They provided short trainings so we were able to understand what should be flagged
- Made it really easy to flag unwanted emails
- Tested employees to see if they were following guidelines
Cons
- I really don't have much constructive feedback - for us, the program worked exactly how we needed it to
Most Important Features
- Ease of flagging emails
- Training and education
- Practice fraud emails
Return on Investment
- I was able to reduce clicks on fake vendors selling real (sometimes fake) products by 20% in the first year we used the program
Alternatives Considered
KnowBe4 PhishER
Other Software Used
Lattice, HubSpot Marketing Hub, Coda
