A firewall won't stop a click. Most attacks start with an email, a message or a phone call, and your people are the first line of defence, when they know what to watch for.
We build the training on real examples of attacks aimed at companies like yours. No dry lectures, but practical situations that employees remember.
Our security specialists deliver it, dealing with attacks daily in monitoring and penetration tests.
We tailor the content to your industry, tools and what your people actually encounter at work.
Phone
Accounts
Manipulation
Mobility
Response
Four messages like those reaching companies every day. For each one, decide whether it is safe or a scam.
Click “Safe” or “Scam”. You'll see right away whether you were right and how to tell.
From: IT support <helpdesk@micros0ft-podpora.com>
Your password expires today
Verify your account within 2 hours or it will be blocked. Click the button below.
The domain “micros0ft” has a zero instead of the letter o, and there is time pressure. Don't click the link, and report the message to IT.
From: Jane Smith <jane.smith@vasefirma.cz>
Materials for Tuesday's meeting
Hi, I've uploaded the presentation to our team in Teams, as we agreed at the meeting.
A familiar colleague from your domain, expected content and no pressure. The file is also in a tool you use.
From: +420 7XX XXX XXX
Parcel awaiting a surcharge of 29 CZK
Without payment it will be returned to the sender. Pay at dpd-cz-doruceni.info
A small amount, a foreign domain and a threat of return. Carriers don't ask for surcharges like this, so check the parcel in their app.
From: John Doe, director <john.doe.ceo@gmail.com>
Urgent payment, don't tell anyone
I'm in a meeting and can't phone. I need to pay a supplier's invoice today, details attached.
A private address, secrecy and haste are typical signs of CEO fraud. Always verify a payment through another channel, such as a phone call.
You can combine the formats. An initial training session supplemented by regular practice campaigns works best.
At your company
Interactive training right in your office. We'll show real attacks, go through model situations and answer questions.
From anywhere
A live webinar for teams in several locations or working from home. We'll hand over the recording for new colleagues.
Verification in practice
We'll send employees safe practice phishing messages and evaluate who clicked and who reported the attack.
Security isn't a one-off action. That's why we repeat the training and track how your team's resilience improves.
With a practice campaign we'll find out how your team is doing today.
We'll focus on the weak spots the test revealed.
Regular practice messages keep attention and habits sharp.
You'll get an overview of progress and recommendations for the next steps.
Employees know what to watch for and what to do when something doesn't feel right. You have an overview of where the company stands.
Want to check your company's technical resilience too?
Penetration testinginfo@evenir.cz · +420 604 644 825