Smishing is a type of phishing attack that uses text messages to communicate with the target. Like email phishing attacks, Smishing attacks attempt to gain confidential information, money or deliver malicious software. Using the guide below you will learn how to create your own simulated Smishing campaigns.
All steps of creating your own Smishing campaign are explained below. If you are unfamiliar with this process, we recommend starting from prerequisites. However, if you are an experienced user feel free to skip to any of the relevant sections below:
- Prerequisites
- Create a New Campaign
- Step 1 - Campaign Description
- Step 2 - Recipient Information
- Step 3 - Scheduling Details
- Step 4 - Campaign Tracking
- Step 5 - Message Content
- Step 6 - Campaign Summary
Prerequisites
First things first, be aware that for an SMS to deliver, the recipient must have an entry within the "Mobile Phone Number" field in their Recipient Information. This will be automatically populated by Active Integration if you use this sync method.
Before you create your first Smishing campaign we recommend picking a template to use. A campaign can use a single template or multiple templates by assigning a tag.
Phishing Tackle has a diverse collection of templates ready for you to use. If you decide to create your own Smishing templates and need help, you can use our knowledge base article that can be found here.
Create a New Campaign
To create a new Smishing campaign, follow the steps below.
- Under Phishing in the left-hand column click "Campaigns".
- Click "Create New Phishing Campaign".
Step 1 - Campaign Description
- Description for this phishing campaign
- Enter a description for your Smishing campaign.
- Next Step
- Click "Next Step" to continue creating your Smishing campaign.
Step 2 - Recipient Information
- Decide which recipients to include in the Smishing campaign
- Tick the box "Send to all recipients" to send this campaign to all recipients in the address book.
- Select a tag that specifies which users to include or exclude in this Smishing campaign.
- NOTE: You'll need to ensure a mobile number is specified within the recipient details for all recipients included in the campaign.
- Tick the box "Send to all recipients" to send this campaign to all recipients in the address book.
- Select your phishing delivery method
- Select "SMS message" to create a Smishing campaign.
- Tags to associate with each recipient after they have been phished
- Select a tag that will be assigned to a recipient after they have been phished.
- Next Step
- Click "Next Step" to continue creating your Smishing campaign.
Step 3 - Scheduling Details
- Your Campaign Start Time
- Enter the date and time for the campaign to start.
- Enter your Time Zone (The default Time Zone can be set in organisation settings).
- Your Campaign Sending Schedule
- Select "Send all at the start time above" if you want all SMS messages to be sent at once.
- Select "Stagger the sending over time" if you want SMS messages sent over a specified period.
- Excluding Dates
- Select a tag that references a date you want to exclude.
- Repeat the whole campaign
- Decide if the campaign should be run once or repeated multiple times.
- Next Step
- Click "Next Step" to continue creating your Smishing campaign.
Step 4 - Campaign Tracking
- Specify the duration you would like activity to be tracked
- Select the duration of time to track user activity.
- Would you like to track the user replies
- Tick the box to track end-user replies.
-
- Tick this option to keep replies sent to your SMS message.
- Next Step
- Click "Next Step" to continue creating your Smishing campaign.
Step 5 - Message Content
- Select the SMS message Template Tags to Include for this campaign
- Templates specified by the selected tags will be Included in this campaign.
- A tag can be assigned to a single or multiple templates.
- Select the SMS message Template Tags to exclude from this campaign
- Templates specified by the selected tags will be Excluded in this campaign.
- A tag can be assigned to a single or multiple templates.
- SMS Message Template Selection
- Select a SMS message template to use in this campaign.
- Domain used within phishing links
- Select a different domain if you no longer want to use the domain specified in the template.
- Landing page to be used, should recipient click any links
- Select a different landing page if you no longer want to use the landing page specified in the template.
- Tags to associate with recipients should they click on any links
- Select a tag that will be automatically assigned to the recipient when a link is clicked.
- Next Step
- Click "Next Step" to continue creating your Smishing campaign.
Step 6 - Campaign Summary
- Campaign Summary
- Review your selected settings and check they are correct.
- Save
- Click "Save" when you are happy with the selected settings.
If you require any further assistance, please contact our support team by clicking here.