Question

How do I create a QR phishing campaign?

Answer

In order to create a custom Teachable Moment, follow the steps below:

1. Under Tools, click Security Awareness, followed by Launch Platform
   • The Security Awareness console opens.
2. Go to Phishing > Custom Teachable Moment
3. Select Create New Custom Teachable Moment
4. Choose a Teachable Moment from the drop-down menu OR search for the keyword “QR Code”. 
5. Once you have identified a template appropriate for your phishing campaign, select the template to reveal the content-details drawer, select the language (if applicable), and then select the Create Simulation button. This will launch the campaign-creation page.
6. Configure the campaign as you would normally. When selecting a teachable moment, consider using one from the QR Code category. These teachable moments are tailored to instruct your learners about the dangers inherent to QR codes, as well as steps to avoid putting themselves at risk.

The QR code phishing simulation does not discern between failures that were caused by clicking a link in the email or scanning the QR code with their smartphone. While not prohibited, we strongly recommend you avoid adding links to QR code phishing templates.

Tip: If you prefer to use your own template, or to create a template from scratch, there is a way to add a QR code. To do so, locate the Add QR Code button on the bottom of the Edit Message editor (see Fig. 1). This will insert a generic QR code image, which you can then resize and move to your preferred location. The simulation platform will find and replace that image with a QR code that is unique to the end user’s email address.