How to set up a Phishing Campaign

You are at the point where you are ready to launch a Phishing Campaign as a part of your teams CyberSecurity training and you may be wondering "where do I start?" In this article we're going to cover setting up a Phishing Campaign in Ethena.

1. First up, you're going to want to be sure that our Phishing Simulator is Allowlisted. Without this, your email provider will likely block our emails coming through (as they are designed to look suspect).
   1. Allowlisting for Microsoft Office (Outlook)
   2. Allowlisting for Google Mail (Gmail)
2. Once you have allowlisted us, you are ready to create your campaign! You'll want to go to the Phishing Campaign icon in the side bar or click here.
3. Next, click on the "Add Campaign" button and you'll be directed to the creation flow (this is very similar to the process for adding a training assignment).
   
   1. The name of the campaign (for your own reference).
      
   2. The dates you would like the campaign to be sent out and for how long it should be live.
      
   3. Select which email templates you would like to send out, each with a different difficulty level indicated on the side. You can also preview these in the creation flow!
      
   4. Who the simulator should be sent to. You can either enroll all your team, upload a specific group in the menu or choose by population filters.
      
   5. If training should be sent to folks who do not pass the phishing checks. This will be automatically assigned to folks who were phished. You will also be able to choose what modules they get sent as shown:
      
4. Once created, this will then be scheduled to send out in the same way that a training assignment is. You'll then be able to view the campaign/edit it on the Phishing page.
   
5. The next step is to wait for folks to participate and results to come in. In the next article we will cover how reporting works for Phishing Campaigns and you can view that here