Social Engineering Attack Awareness Using .Doc/Pdf/Google Docs and Spoofed Email

Need advise for our company experiment. We are planning to observe the security awareness among our staff. I have an idea but lacking of knowledge on how to do it. I want to create spoofed email and send one .doc/.pdf file inside the email. That .doc file will return the IP address if our staff click to open the file. From this we can see in our company how many users are not aware with security threat and we will educate them later on. Because we are using firewall, can it be done from external IP as well? Your help and idea are really appreciated.

1 Response

null-byte.wonderhowto.com/how-to/exploit-dde-microsoft-office-defend-against-dde-based-attacks-0180706/

Use a command that documents an IP address and computer name, that then puts it in a Excel Spreadsheet.

If you want to spoof your email you can either just create a false one, use a site like anonymousemail.me , or just buy an app that does this stuff. One good company is Knowbe4 knowbe4.com

Hope this helps.

Share Your Thoughts