Solvionix Phishing Campaign
Vigilus ran an authorized, realistic phishing simulation to help a confidential client understand how employees respond to targeted email threats.
Industries
Not specified
Services
Cybersecurity
Platforms
Not specified
About the project
A confidential client needed a clearer picture of employee readiness against phishing attacks. Leadership wanted to understand whether staff could recognize a suspicious email, report it appropriately, and avoid unsafe actions involving credentials or multi-factor authentication.
Vigilus designed and executed an authorized phishing simulation as part of a broader security assessment. The campaign used a client-specific scenario informed by the services and workflows employees were likely to recognize, helping the exercise reflect the type of targeted attempt the organization could face in the real world.
The simulation confirmed that employee awareness and authentication practices needed improvement. The results gave the client practical evidence to guide security awareness training, reinforce reporting expectations, and prioritize follow-up controls around phishing and MFA use.
What we did
- Planned and executed an authorized phishing simulation for a confidential client.
- Built a custom, client-specific phishing simulation site for the assessment.
- Tested campaign delivery to support a realistic employee response exercise.
- Tracked employee actions such as reporting behavior, link interaction, simulated credential submission, and MFA-related responses.
- Identified risky behaviors that could expose the organization during a real phishing attack.
- Delivered findings in a way the client could use to improve training, policies, and security controls.
