Central Phish Threat

Working on object packs for Unreal Engine 4 can be tedious with Blender. That's why I created the Add-on: 'Blender for UnrealEngine'. It simplifies the method of exporting from Blender to Unreal Engine 4 by allowing you to export all the assets of a scene at the same time. Blender to unreal. Import options in the Unreal Engine 4 Generally, the option that should be used for all the models is the import of normals and tangents. Since both Blender and UE4 use the same tangent space, MikkTSpace, the model can be rendered in the engine as close as it was.

Central Phish Threats
Central Phish Threatens
Sophos Central Phish Threat
Sophos Central Phish Threat Datasheet

The goal of the article

Following the article in Part 1, Part 2 will proceed with Phish Threat configuration with the second Campaings type Credential Harvesting on Sophos Central.
Also, you can review part 1 of the article here.

If the Phish Threat V2 IP address and domain names are not included in the allow list, Office 365 executes the links making it appear as an end user has clicked on the links. To ensure the proper execution of Phish Threat V2 with Office 365, set up an exception for the Phish Threat V2 IP addresses and domains for both Safe Links and Safe.
How do I allow Phish Threat in Sophos Email Gateway? Go to Sophos Central Dashboard Email Gateway Settings Click Inbound Allow / Block under Email Security Click Add Select Add allow Enter the domain for the campaign as listed in Sophos Phish Threat Settings Sending domains and IPs. How do I allow Phish Threat in Reflexion?

Phish Threat, Sophos Central Admin What to do. Go to the Sophos Phish Threat Dashboard Settings Phishing Templates Create New Template. On Add Phishing Template, enter a Name, Preview Image, select an Attack Type and then select Save - Stay on Page. On Edit Phishing Template, select the icon beside a language. – Managed from Sophos Central – Phish Threat includes the Campaign Builder – Attack Templates – Interactive Training Modules, – Reporting dashboard for all users registered with the organization’s email domain.

Instructions for configuring Phish Threat features on Sophos Central.

To use Phish Threat feature on Sophos Central, we first need to create a Sophos Central account.
To create Sophos Central account, you can see the instructions here.
After acquiring Sophos Central account, log into Sophos Central with the account you just created at https://central.sophos.com.

Next select People to add users for Phish Threat configuration.
Click Add> Add User.
The Add User table appears, fill in the name FIRST & LAST NAME and enter the email address in the EMAIL ADDRESS box.
Note: Email address must be a domain email address, do not use public email addresses like Gmail, Yahoo …

Next, let email training send to users who are not added to the Spam folder. We need to add IP addresses and domains for training to the trusted item (whilelist) on Mail Server or mail services like G- Suite, Office 365 ….
To obtain the IP address, log in to Sophos Central account and click Phish Threat> Setting> Sending domains and IPs.
Now we will see two IP addresses and a series of domains that Sophos provides for the training.

Next we press MY PRODUCTs> Phish Threat> Campaigns to enter the Phish Threat feature.
Here to do training for users we need to create Campaigns, to create Campaigns click New Campaigns.
We will set name for Campaigns and choose the type for Campaigns.
Campaigns has 4 types:
Phishing: Attracting targeted users to click on a link in an email.
Credential Harvesting: Attracting targeted users to enter login information into a fake website.
Attachment: Attracting targeted users to open an attachment in an email.
Training: Enroll the target user for mandatory training based on the selected training modules.
We will do the simulation of Campaigns to see how it works.
In this article, we will simulation Credential Harvesting Campaings type.

After clicking New Campaigns, we will enter the name for Campaigns as Phishing and select Phising and then click Next.

Next we will select the attack pattern, in this case Sophos has provided us with a lot of attack patterns coming from famous websites like Amazon, Adobe, Apple … we just choose one of the The type of attack we want.
Here We will choose the type of Email Account Verification and then click Next.

Next, we will choose the type of training for users, where Sophos also provides training types on internet threats such as Ransomeware, Keyloggers, Macro Malware …, these training types will include 1 video clip with subtitles English and record video time.
We can choose up to 5 training types for 1 Campaigns and those training types will be random when sent to users.
Here We will choose the type of Training Credential Harvesting and then click Next.

Next is the Customize section, which allows you to edit the contents of Attack Email, Attack Landing, Reminders Email, Caught Landing, Training Landing.
This section contains 4 parts: Attack Email, Reminder Email,
Attack Landing, Caught Landing, Training Landing.

Attack Email

In this Attack Email section, when we click, we will see the information available such as Name, Email, Email Subject. We can change it if you want.
In this section, we will form an IT department manager to send an email informing all employees about renewing the account in the company’s database according to the schedule and asking employees to log in to the account by link to verify the account.
In the From Name section we will set it as Nguyen Van Phu.
In the From Mail section we will set it as phu.nv123@helpdesk-tech.com.
Alternatively, we can use the sub-domain by checking the box to use a sub-domain on phishing URL replacements and entering the box as Sophos, then the mail account will be phu.nv123@sophos.helpdesk-tech .com.
Email Subject will be [IT Department] Request login to authenticate.

Next we drag the mouse down to see the contents of the email we will send, we can click Edit to edit the content sent.
The content is edited as follows:

Attack Landing.

This is the page that will be displayed after the user clicks on the link.

Reminder Email.

This is a reminder email when we have not completed the training.

Caught Landing.

This Caught Landing section will contain a page with the content “This is not a real attack but it may have happened”.
This page will appear when the user opens the email and clicks on the link, the page appears to be wrong for the user to know that this is a training and the user has not passed, so he will do the test.
You can edit the content of the page by clicking Edit.

Training Landing.

This is a page informing us that we were invited to tranining.

After modifying the Customize section click Next to go to the Enroll Users section.
In this section we can assign 1 or more Users or Group for training.

Click Next to go to Review & Schedule, in this section you can set the time for training to take place.
You can choose Launch at schedule time to set the timetable or select Launch immediately for the training to take place immediately after clicking Done.
In the Sending Increment section, help us set up this training for many people in a certain period of time.
For example: if you choose Send to all enroll users and at the same time, this training will be sent to all users at the same time. If you select Send 5% and select Every hour, every 1 hour the training will be sent to 5% of the total number of people selected in the Enroll User section above.

Pull down the Email, Training and Recipients sections to help the user check the content of the email to be sent and the selected training section along with the user name and email of the designated user.
Click Done to finish.

At this time, on Sophos Central will display the parameters of the training.
As we can see in Active Campaigns is the name of the Phishing training, next to 1 Emails sent, 1 email was sent.
Next is 0 Emails opened, this part will increase when a user opens the email.
At 0 users are caught, this part will increase when the user clicks on the link.
At 0 Finished training, this part will increase when the user completes the training.