Method, system, device and medium for phishing simulation without private information collection

Abstract

The application discloses a mail phishing drill method and system without collecting privacy information, equipment and medium, and relates to the technical field of network security. The method comprises the following steps: performing hash encryption on all recipient mailbox addresses to obtain corresponding encrypted strings; generating a phishing webpage; generating phishing links corresponding to each recipient mailbox address, and pointing each phishing link to the phishing webpage; sending phishing mails with specified mail body contents to each recipient mailbox address; when a recipient enters the phishing webpage, fills in personal information in a personal information input box and clicks a submit button, obtaining the encrypted string in the phishing link and uploading it; receiving and summarizing all uploaded encrypted strings, determining corresponding recipients as users who have been phished, and conducting propaganda and education on all users who have been phished. The application can avoid the collection and transmission of personal sensitive information during the phishing mail drill process, thereby minimizing or avoiding personal information leakage events as much as possible.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of network security, in particular to a mail phishing drill method and system without collection of privacy information, equipment and medium. BACKGROUND

[0002] Nowadays, large enterprises from the president to ordinary employees have to deal with a large number of emails every day. In recent years, events of collecting personal sensitive information or important company materials through phishing emails have occurred frequently. In order to improve the network security awareness of all employees of the company, test the identification ability of the employees when facing social engineering attacks, and test the protection ability of the mail gateway, mail sandbox and other devices, it is necessary for large enterprises to periodically conduct mail phishing drills. Ordinary mail phishing drills can directly collect personal bank cards, ID numbers, employee numbers or important asset information of the company by forging the company's official website page. The background summarizes and statistics these information, and according to the results, the safety awareness of the employees is promoted and educated. This way is simple and effective, but has many disadvantages, for example: the direct collection of personal or important information of the company in the process of mail phishing drill may involve illegal and irregular collection of information. Direct collection of such sensitive information may not only face employee complaints and disputes, but also may lead to leakage of sensitive information if the transmission process is not properly secured, which may bring risks to the company. SUMMARY

[0003] The purpose of the present application is to provide a mail phishing drill method, system, equipment and medium without collection of privacy information, so as to avoid the collection and transmission of personal sensitive information in the process of phishing email drill, thereby minimizing or avoiding personal information leakage events as much as possible.

[0004] To achieve the above purpose, the present application provides the following solutions:

[0005] A mail phishing drill method without collection of privacy information, comprising:

[0006] Hash encryption is performed on all recipient mailbox addresses to obtain corresponding encrypted strings;

[0007] A phishing webpage is generated; the phishing webpage includes a personal information input box and a submit button;

[0008] A phishing link corresponding to each of the recipient mailbox addresses is generated, and each of the phishing links points to the phishing webpage; the phishing link includes the encrypted string corresponding to the recipient mailbox address;

[0009] Phishing emails with specified email content are sent to each of the recipient mailbox addresses; the specified email content includes the phishing link corresponding to the recipient mailbox address;

[0010] When the recipient enters the phishing webpage, fills in personal information in the personal information input box and clicks the submit button, the encrypted string in the phishing link is obtained and uploaded;

[0011] All uploaded encrypted strings are received and summarized, the corresponding recipients are determined as users who have been attacked, and all users who have been attacked are educated.

[0012] Optionally, the encrypted string in the phishing link is obtained and uploaded, specifically including:

[0013] The encrypted string in the phishing link is obtained through the searchParams attribute of the URL object encapsulated by javascirpt;

[0014] The request is constructed through the XMLHttpRequest object of javascript, and the obtained encrypted string is added to the request object for uploading.

[0015] Optionally, the phishing link corresponding to each of the recipient email addresses is generated, and each of the phishing links points to the phishing webpage, specifically including:

[0016] The phishing webpage is deployed in the Django framework of Python, and the URL of the phishing webpage is configured through the routing configuration file of the Django framework;

[0017] The encrypted string corresponding to the recipient email address is used as the parameter of the URL to generate the phishing link corresponding to each of the recipient email addresses;

[0018] URL mapping configuration is performed in the Web framework configuration file, and each of the phishing links points to the phishing webpage.

[0019] Optionally, a phishing email with specified email body content is sent to each of the recipient email addresses, specifically including:

[0020] An SMTP server object of the sender mailbox is created using the SMTP_SSL method of the smtplib library of Python;

[0021] The sender username and password information of the sender mailbox server object are configured for login;

[0022] A mail content object is created using the MIMEMultipart library;

[0023] A phishing email with specified email body content is sent to each of the recipient email addresses through the mail sending method of the sender mailbox server object.

[0024] Optionally, the encrypted string in the phishing link is obtained and uploaded, and the method further comprises the following steps:

[0025] checking the validity of the filled-in personal information to obtain a checking result;

[0026] when the checking result is a checking failure, prompting the recipient to change the personal information in the personal information input box and click the submit button, and returning to the step of checking the validity of the filled-in personal information to obtain a checking result until the checking result is a checking success.

[0027] Optionally, the personal information includes a bank card number, a mobile phone number and an ID number; checking the validity of the filled-in personal information to obtain a checking result specifically comprises the following steps:

[0028] checking the validity of the bank card number by using the Luhn algorithm to obtain a first result;

[0029] checking the validity of the mobile phone number by using a regular expression to obtain a second result;

[0030] checking the validity of the ID number by using a citizen ID number checking rule to obtain a third result;

[0031] when the first result, the second result and the third result are all checking successes, the checking result is a checking success;

[0032] when at least one of the first result, the second result and the third result is a checking failure, the checking result is a checking failure.

[0033] Optionally, all recipient email addresses are hashed and encrypted to obtain corresponding encrypted strings, specifically comprising the following steps:

[0034] using the sha256 method of the hashlib library of Python to perform irreversible hash encryption on all recipient email addresses to obtain corresponding encrypted strings.

[0035] A mail phishing drill system without collecting personal information, comprising:

[0036] an email address encryption module configured to hash and encrypt all recipient email addresses to obtain corresponding encrypted strings;

[0037] a phishing webpage generation module configured to generate a phishing webpage; the phishing webpage includes a personal information input box and a submit button;

[0038] The phishing link processing module is configured to generate a phishing link corresponding to each of the recipient mailbox addresses, and to direct each of the phishing links to the phishing webpage; the phishing link includes an encrypted string corresponding to the recipient mailbox address;

[0039] The phishing email sending module is configured to send a phishing email with a specified email content to each of the recipient mailbox addresses; the specified email content includes a phishing link corresponding to the recipient mailbox address;

[0040] The phishing result collecting module is configured to, when the recipient enters the phishing webpage, fill in personal information in the personal information input box and click the submit button, obtain the encrypted string in the phishing link and upload the encrypted string;

[0041] The phishing result processing module is configured to receive and aggregate all uploaded encrypted strings, determine corresponding recipients as users who have been phished, and perform propaganda and education on all users who have been phished.

[0042] An electronic device includes a memory for storing a computer program and a processor for running the computer program to enable the electronic device to perform the phishing email drill method described above.

[0043] A computer-readable storage medium stores a computer program that, when executed by a processor, implements the phishing email drill method described above.

[0044] According to the specific embodiments of the present application, the following technical effects are provided:

[0045] The phishing email drill method provided by the present application, when the recipient enters the phishing webpage, fills in personal information in the personal information input box and clicks the submit button, only obtains the encrypted string in the phishing link and uploads the encrypted string, without uploading the personal sensitive information filled in by the recipient, thereby avoiding the collection and transmission of personal sensitive information, and further reducing or avoiding the occurrence of personal information leakage events caused by the transmission of personal sensitive information. In addition, by receiving and aggregating all uploaded encrypted strings, determining corresponding recipients as users who have been phished, and performing propaganda and education on all users who have been phished, the network security awareness of users can be enhanced. BRIEF DESCRIPTION OF DRAWINGS

[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the drawings needed in the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor on the basis of these drawings.

[0047] Figure 1 The flow chart of the phishing email rehearsal method provided by the present application is shown in the figure.

[0048] Figure 2 The specific flow chart of the phishing email rehearsal method provided by the present application is shown in the figure.

[0049] Figure 3 The module diagram of the phishing email rehearsal system provided by the present application is shown in the figure.

[0050] Symbol explanation:

[0051] Email address encryption module-1, phishing webpage generation module-2, phishing link processing module-3, phishing email sending module-4, phishing result collection module-5, phishing result processing module-6. DETAILED DESCRIPTION

[0052] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor fall within the scope of protection of the present application.

[0053] The purpose of the present application is to provide a phishing email rehearsal method, system, device and medium without collection of privacy information, so as to avoid collection and transmission of personal sensitive information in the phishing email rehearsal process, thereby reducing or avoiding personal information leakage events as much as possible.

[0054] In order to make the above-mentioned purposes, features and advantages of the present application more obvious and easy to understand, the present application will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0055] Embodiment one

[0056] The present embodiment provides a phishing email rehearsal method without collection of privacy information, as shown in the figures, the phishing email rehearsal method comprises: Figure 1 and Figure 2 The phishing email rehearsal method comprises:

[0057] Step S1: Hash encryption is performed on all recipient email addresses to obtain corresponding encrypted strings.

[0058] Preferably, the sha256 method of the hashlib library of Python is used to perform irreversible hash encryption on all recipient email addresses to obtain corresponding encrypted strings.

[0059] Specifically, the mailbox address encryption module uses the sha256 method of the hashlib library of Python to perform irreversible hash encryption on the mailbox address of each intended recipient to obtain an encrypted string, denoted as sessionId, and stores the correspondence between the sessionId and the mailbox address of the recipient in a list. Although a normal incremental number can also correspond the recipient to the serial number, the sessionId value is transmitted to the front-end webpage as a parameter, and the normal incremental number is easy to be traversed and forged. The sessionId obtained by using the irreversible hash encryption algorithm has the advantages of fixed length and anti-traversal, which can improve the security and stability.

[0060] Step S2: generating a phishing webpage; the phishing webpage includes a personal information input box and a submit button.

[0061] The phishing webpage needs to collect personal sensitive information through the phishing webpage. Specifically, the phishing webpage generation module uses the HyperText Markup Language (HTLM) and Cascading Style Sheets (CSS) to imitate the official page of a bank or the like to display sensitive information input boxes such as an ID card and a bank card number on the phishing webpage. A "submit" button is displayed below the input boxes by using the HTML button tag. Moreover, the onclick function (a property of the HTML button tag, triggered when the button is clicked) of the HTML button tag is used to trigger a corresponding javascript verification processing function when the recipient clicks the "submit" button, and the validity verification of the corresponding input box is performed in the javascript verification processing function.

[0062] Step S3: generating a phishing link corresponding to each of the recipient mailbox addresses, and pointing each of the phishing links to the phishing webpage; the phishing link includes an encrypted string corresponding to the recipient mailbox address.

[0063] Further, step S3 specifically includes: deploying the phishing webpage in the Django framework of Python, and configuring a URL for the phishing webpage through the routing configuration file of the Django framework; taking the encrypted string corresponding to the recipient mailbox address as a parameter of the URL to generate a phishing link corresponding to each of the recipient mailbox addresses; and performing URL mapping configuration in the Web framework configuration file to point each of the phishing links to the phishing webpage.

[0064] Specifically, the phishing link processing module deploys the generated phishing webpage in a Django project of Python (a Python language server development framework) and configures a URL (i.e., a uniform resource locator, here, a website address) for the webpage through a routing configuration file of the Django framework, so that accessing the relevant URL can open the corresponding webpage. The phishing link generation module generates a special link for the recipient by adding additional parameter information to the URL, specifically, adds the sessionId information (i.e., the encrypted string generated according to the recipient's mailbox in the above step S1) to the phishing page URL through the get form (a way of transmitting parameters to a web server) to generate a special phishing link for the recipient, forming a hyperlink address such as http: / / www.fish.com?sessionId=xxx. Clicking the hyperlink will open the phishing page and transmit the sessionId value to the phishing page.

[0065] Step S4: sending a phishing email with specified email body content to each of the recipient mailbox addresses; the specified email body content includes a phishing link corresponding to the recipient mailbox address.

[0066] Further, step S4 specifically includes: creating a sender mailbox server object using the SMTP_SSL method of the smtplib library of Python; configuring the sender username and password information for the sender mailbox server object to log in; creating a mail content object using the MIMEMultipart library; and sending a phishing email with specified email body content to each of the recipient mailbox addresses through the mail sending method of the sender mailbox server object.

[0067] Specifically, the sender information needs to be specified before sending the email to the recipient, and the sender information needs to be logged in with the relevant username and password on the sender server. In this embodiment, the phishing email sending module creates a sender mailbox server object using the SMTP_SSL related method of the smtplib library of Python, denoted as server, configures the sender username and password information for the server object to attempt login, and after successful login, creates a mail content object using the MIMEMultipart library, the email body content includes the phishing hyperlink generated in the above step S3, and finally sends the email to the specified recipient through the mail sending related method of the server object.

[0068] Step S5: when the recipient enters the phishing webpage and fills in the personal information in the personal information input box and clicks the submit button, the encrypted string in the phishing link is obtained and uploaded.

[0069] The encrypted string in the phishing link is obtained and uploaded, specifically comprising: obtaining the encrypted string in the phishing link through the searchParams attribute of the URL object encapsulated by javascirpt; constructing a request through the XMLHttpRequest object of javascript, and uploading the obtained encrypted string into the request object.

[0070] Further, obtaining the encrypted string in the phishing link and uploading further comprises: performing validity checking on the filled personal information to obtain a checking result; when the checking result is a checking failure, prompting the recipient to change the personal information in the personal information input box and click the submit button, and returning to the step of "performing validity checking on the filled personal information to obtain a checking result" until the checking result is a checking success. That is, the form table information of the front-end webpage is only displayed, and the "submit" button clicked by the user is only subjected to validity checking, and after the checking success, the sessionid is submitted to the back-end statistical interface for statistics.

[0071] As a specific implementation, the personal information comprises: a bank card number, a mobile phone number and an ID number; performing validity checking on the filled personal information to obtain a checking result specifically comprises: performing validity checking on the bank card number by using the Luhn algorithm to obtain a first result; performing validity checking on the mobile phone number by using a regular expression to obtain a second result; performing validity checking on the ID number by using a citizen ID number checking rule to obtain a third result; when the first result, the second result and the third result are all passed, the checking result is a checking success; when there is at least one item of the first result, the second result and the third result that is failed, the checking result is a checking failure. The specific validity checking method of the bank card number, the mobile phone number and the ID number is as follows:

[0072] The validity checking of the bank card number can be performed by using the Luhn algorithm of the javascript version. The Luhn algorithm is a checking method invented by IBM scientist Hans Peter Luhn, and is widely used for bank card number validity checking. The specific checking method is to reserve the original digits from right to left for the odd digits of the input bank card number, and multiply the even digits by 2. If the result of multiplying the even digits by 2 is a two-digit number, 9 should be further subtracted. Finally, the sum of the calculation results of all digits is obtained. If the total sum can be divided by 10, the bank card number is determined to be legal, and if the total sum cannot be divided by 10, the bank card number is determined to be illegal.

[0073] The checking of the mobile phone number can be performed according to the number segment of the operator combined with the regular expression. The number segment of the four major operators in China and the regular matching expression are shown in Table 1.

[0074] Table 1 Number segment of four major operators and regular matching expression

[0075]

[0076]

[0077] The validity check of the resident ID card can be performed according to the last digit check rule of the citizen ID number in GB11643-1999. Specifically, the length of the ID number should be 18 digits, and the first digit to the 17th digit of the ID number from left to right are multiplied by 7, 9, 10, 5, 8, 4, 2, 1, 6, 3, 7, 9, 10, 5, 8, 4, 2, and then the sum is divided by 11 to get the remainder. The remainder can only be 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, which corresponds to the last digit of the ID number as 1, 0, X, 9, 8, 7, 6, 5, 4, 3, 2, respectively. If the remainder of the input ID number corresponds to the last digit, it is considered as a valid ID number, otherwise it is invalid.

[0078] If the verification is passed, the information is submitted to the corresponding background statistical service interface. Specifically, the phishing result collection module obtains the sessionId information carried in the URL through the searchParams attribute of the URL object encapsulated by javascript language. When the "submit" button is clicked, the form data is not actually submitted, but a related request is constructed through the XMLHttpRequest object of javascript, and the sessionId value is added to the request object in the related request, so as to realize the transmission of only the sessionId value, and the actual bank card and other sensitive information are not transmitted.

[0079] Step S6: receiving and summarizing all uploaded encrypted strings, determining the corresponding recipient as a user who has been attacked, and conducting propaganda and education to all users who have been attacked.

[0080] Specifically, after the recipient opens the phishing webpage, fills in the valid information and submits it, only the sessionId will be submitted to the background. After the phishing result processing module of the background receives the sessionId submitted by the phishing page, the email address corresponding to the sessionId in the list can be considered as the email user who has been attacked. Finally, the users who have been attacked are summarized and processed, such as propaganda and education, to improve their network security awareness.

[0081] Embodiment two

[0082] In order to perform the method corresponding to the above embodiment one to realize the corresponding functions and technical effects, an email phishing drill system without collecting private information is provided below. As shown in Figure 3As shown, the email phishing drill system comprises:

[0083] A mailbox address encryption module 1 is configured to perform hash encryption on all recipient mailbox addresses to obtain corresponding encrypted strings.

[0084] A phishing webpage generation module 2 is configured to generate a phishing webpage; the phishing webpage comprises a personal information input box and a submit button.

[0085] A phishing link processing module 3 is configured to generate a phishing link corresponding to each of the recipient mailbox addresses, and direct each of the phishing links to the phishing webpage; the phishing link comprises an encrypted string corresponding to the recipient mailbox address.

[0086] A phishing email sending module 4 is configured to send a phishing email with a specified email content to each of the recipient mailbox addresses; the specified email content comprises a phishing link corresponding to the recipient mailbox address.

[0087] A phishing result collection module 5 is configured to, when a recipient enters the phishing webpage, fill in personal information in the personal information input box and click the submit button, obtain and upload the encrypted string in the phishing link.

[0088] A phishing result processing module 6 is configured to receive and aggregate all uploaded encrypted strings, determine corresponding recipients as users who have been phished, and perform propaganda and education on all users who have been phished.

[0089] Embodiment three

[0090] The embodiment of the present application also provides an electronic device comprising a memory and a processor, the memory being configured to store a computer program, and the processor being configured to run the computer program to enable the electronic device to perform the email phishing drill method in embodiment one. The electronic device can be a server.

[0091] In addition, the present application also provides a computer readable storage medium storing a computer program, which, when executed by a processor, implements the email phishing drill method in embodiment one.

[0092] In summary, the present application provides an email phishing drill method, system, device and medium without collection of private information, which can complete email phishing drill without collection of personal sensitive information in the email phishing drill process, so as to make the email phishing drill legal and compliant, avoid complaints and disputes caused by email phishing drill, and also reduce the risk of sensitive information leakage in the email phishing drill process because sensitive data transmission is not involved.

[0093] The various embodiments described in this specification are presented for the purpose of illustrating the principles of the present application and its best mode of operation. Each of the embodiments described in this specification has been provided for the purpose of illustration only and the various embodiments are not intended to limit the present application in any way unless otherwise specifically indicated. The same parts and / or features of the various embodiments described in this specification can be referenced using the same reference numerals for the ease of understanding of the present application.

[0094] The principles and implementations of the present application have been described in the above embodiments, which are only used to help understand the method of the present application and its core idea. Meanwhile, for those skilled in the art, the specific implementation and application range of the present application can be changed according to the idea of the present application. In summary, the content of the specification should not be understood as a limitation of the present application.

Claims

1. A method for conducting email phishing drills without collecting privacy information, characterized in that, include: Hash and encrypt all recipient email addresses to obtain the corresponding encrypted strings; Generate a phishing webpage; the phishing webpage includes a personal information input box and a submit button; Generate phishing links corresponding to each of the recipient's email addresses, and point each of the phishing links to the phishing webpage; the phishing links include encrypted strings corresponding to the recipient's email addresses; A phishing email with a specified email body content is sent to each of the aforementioned recipient email addresses; the specified email body content includes a phishing link corresponding to the recipient's email address. When the recipient enters the phishing webpage, fills in personal information in the personal information input box and clicks the submit button, the encrypted string in the phishing link is obtained and uploaded; The system receives and aggregates all uploaded encrypted strings, identifies the corresponding recipients as compromised users, and provides education and awareness campaigns to all compromised users. Specifically, identifying the corresponding recipients as compromised users includes: storing the mapping between encrypted strings and recipient email addresses in a list; upon receiving an encrypted string submitted from a phishing page, finding the email address corresponding to the encrypted string in the list, and identifying the recipient corresponding to that email address as a compromised user.

2. The email phishing exercise method without collecting privacy information as described in claim 1, characterized in that, Obtaining and uploading the encrypted string from the phishing link, specifically including: The encrypted string in the phishing link can be obtained through the searchParams property of the URL object wrapped by JavaScript; The request is constructed using the XMLHttpRequest object in JavaScript, and the obtained encrypted string is added to the request object for uploading.

3. The email phishing exercise method without collecting privacy information as described in claim 1, characterized in that, Generating phishing links corresponding to each of the recipient's email addresses, and redirecting each of the phishing links to the phishing webpage, specifically including: The phishing webpage is deployed in the Python Django framework, and the URL of the phishing webpage is configured through the Django framework's routing configuration file; The encrypted string corresponding to the recipient's email address is used as a parameter of the URL to generate a phishing link corresponding to each of the recipient's email addresses. Configure URL mapping in the Web framework configuration file to point all the phishing links to the phishing webpage.

4. The email phishing exercise method without collecting privacy information according to claim 1, characterized in that, Phishing emails with specified content are sent to the email addresses of each of the aforementioned recipients, specifically including: Use the SMTP_SSL method of Python's smtplib library to create a sender's mailbox server object; Configure the sender's username and password information for the sender's email server object to log in; Use the MIMEMultipart library to create email content objects; Phishing emails with specified email body content are sent to each of the recipient email addresses using the email sending method of the sender's email server object.

5. The email phishing exercise method without collecting privacy information according to claim 1, characterized in that, The process of retrieving and uploading the encrypted string from the phishing link also includes: The validity of the personal information entered is verified, and the verification result is obtained; If the verification result is that the verification fails, the recipient is prompted to change their personal information in the personal information input box and then click the submit button, and then return to the step "Verify the validity of the personal information entered and obtain the verification result" until the verification result is that the verification passes.

6. The email phishing exercise method without collecting privacy information according to claim 5, characterized in that, The personal information includes: bank card number, mobile phone number, and ID card number; the validity of the entered personal information is verified, and the verification result is obtained, specifically including: The Luhn algorithm is used to verify the validity of the bank card number, and a first result is obtained. The validity of the mobile phone number is validated using regular expressions to obtain a second result. The validity of the ID number is verified using the citizen ID number verification rules, resulting in a third result. When the first result, the second result, and the third result are all passed, the verification result is considered passed. If at least one of the first result, the second result, and the third result fails, then the verification result is "verification failed".

7. The email phishing exercise method without collecting privacy information according to claim 1, characterized in that, Hash and encrypt all recipient email addresses to obtain the corresponding encrypted strings, specifically including: Using the sha256 method of Python's hashlib library, each recipient's email address is irreversibly hashed and encrypted to obtain the corresponding encrypted string.

8. A phishing email training system that avoids collecting privacy information, characterized in that, include: The email address encryption module is used to hash and encrypt all recipient email addresses to obtain the corresponding encrypted strings. A phishing webpage generation module is used to generate phishing webpages; the phishing webpages include a personal information input box and a submit button; The phishing link processing module is used to generate phishing links corresponding to each of the recipient's email addresses, and to point each of the phishing links to the phishing webpage; the phishing link includes an encrypted string corresponding to the recipient's email address; The phishing email sending module is used to send phishing emails with specified email body content to each of the recipient's email addresses; the specified email body content includes a phishing link corresponding to the recipient's email address. The phishing result collection module is used to obtain and upload the encrypted string in the phishing link when the recipient enters the phishing webpage, fills in personal information in the personal information input box and clicks the submit button; The phishing result processing module is used to receive and aggregate all uploaded encrypted strings, identify the corresponding recipients as victims, and provide education and awareness campaigns to all victims. Specifically, identifying the corresponding recipients as victims includes: storing the mapping between encrypted strings and recipient email addresses in a list; upon receiving an encrypted string submitted by a phishing page, finding the email address corresponding to the encrypted string in the list, and identifying the recipient corresponding to that email address as a victim.

9. An electronic device, characterized in that, The device includes a memory and a processor, the memory being used to store a computer program, and the processor running the computer program to cause the electronic device to perform the email phishing exercise method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, It stores a computer program that, when executed by a processor, implements the email phishing drill method as described in any one of claims 1 to 7.

Images