Quishing (QR phishing) V1.1
QR codes generated with embedded tracking. Catches employees scanning from mobile — outside the email gateway scope.
Awareness V1.1 · Sub-capability
Multi-channel awareness
Attackers do not stop at email. Quishing (QR phishing), smishing (SMS), WhatsApp phishing and vishing (voice via Twilio) — coverage of every channel your team actually receives.
Capabilities
Smishing (SMS phishing) V1.1
Twilio-based send with tracked shortlinks. Localized messages (bank, courier, gov) — a real fraud vector worldwide.
WhatsApp phishing V1.1
Meta WhatsApp Cloud API. "Support" or "shipment" messages with a link → fake login. Catches employees who trust WA over email.
Vishing (voice phishing) V1.1
Pre-recorded Twilio calls. Tracks answer/duration. Useful for simulating BEC escalation or fake IT support.
Attachment phishing
Tracks downloads of fake attachments (PDF "invoice", XLS "HR"). Measures who opens vs only opens the email.
Chat-based phishing (Teams/Slack)
Simulated message templates delivered via connector — a growing vector in collaboration-heavy orgs.