Phish What You Wish
This provides IT professionals with a simple tool to raise phishing awareness, particularly for local websites, though it is incremental as it builds on existing mimicry methods.
The researchers tackled the problem of creating phishing websites for awareness training by developing a prototype that dynamically mimics websites using enriched screenshots, resulting in 98% functional hyperlinks compared to 43% with competitors and low suspicion rates from users.
IT professionals have no simple tool to create phishing websites and raise the awareness of users. We developed a prototype that can dynamically mimic websites by using enriched screenshots, which requires no additional programming experience and is simple to set up. The generated websites are functional and remain up-to-date. We found that 98% of the hyperlinks in mimicked websites are functional with our tool, compared to 43% with the best competitor, and only two participants suspected phishing attempts at the time they were performing tasks with our prototype. This work intends to raise awareness for phishing attempts especially with local websites by providing an easy to use prototype to set up such phishing sites.