MD
Mark Davies · Financemark.davies@To: Sarah Collins
Q3 payroll summary shared with you
Hi Sarah,
here’s the Q3 payroll summary we talked about.
to open the file.
Payroll summary Q3.xlsxSharePoint · Northfield Accountants
OpenThanks, Mark
Phishing simulation
Practice phishing emails that look like the real thing
Each person gets their own practice emails at random moments, at five levels of difficulty, in the name of real colleagues and brands they know. Whoever clicks gets a short lesson, never a telling-off.
Find the 3 signs0 of 3
Click on whatever doesn’t add up in the email. Or press Report a Canary straight away.
✓ Thank you. Your report has been received.
Report and learn
After a report, a short lesson. Play one yourself.
Anyone who reports a practice email now and then gets a mini-lesson: a drawn situation and one question, done in half a minute. Try it.
50+mini-lessons, and more coming
6+ways scams reach you, all covered: email, text, phone, WhatsApp, QR and social media
30 sper lesson, between other work
Mini-lesson
Myth or fact? The padlock
“A padlock / https in the address bar means a website is safe and trustworthy.” Myth or fact?
Practice sign-in pages
Some clicks go one step further
Real phishing often does not stop at a link: the link opens a page that asks you to sign in. Turn on practice sign-in pages and some practice emails lead to exactly that, so you see who would have typed their password.
- A plain sign-in page with the person's own email address filled in, never a copy of a real brand
- Nothing anyone types is ever sent or stored: the page only notes that the button was pressed
- Straight after, the lesson: what gave the email away, and the module that protects an account when a password gets out
- Reports show who clicked and who entered details, and who still reported in time after a click
- Off by default: the owner turns it on when setting up, or on the Schedule page
Getting started
From sign-up to the first practice email
Four steps, with sensible settings already filled in. You can change all of it later.
- 1
Create your account
Your company name, your country and your work email. The first 14 days are free, no credit card needed.
- 2
Tell us how you work
Your email domain, the brands and tools your team really uses, and your working hours. That is what makes practice emails look like your own week.
- 3
Invite your team
By email, from an Excel list, or by connecting a Microsoft 365 group, so joiners and leavers are handled for you. Everyone says yes to practising themselves.
- 4
Add the button and go
Put Report a Canary in Outlook, send yourself a test practice email to check it arrives, and start. From then on it runs by itself.
Try it free for 14 days
After 14 days your subscription starts automatically, at the price for your team size. Cancel free of charge up to and including day 14.
Five levels
From obviously fake to an email from your own colleague.
Everyone gets a random mix of every level. The top three are spear phishing: aimed at your company, your role and your colleagues. Exactly how real attackers work.
- Real colleagues’ names, job titles and departments
- A copied domain that is one letter off
- Shared files, invoices and email threads already in progress
Only colleagues who take part in the training themselves appear in practice emails. Nobody gets a practice email without consent.
The brands in these examples are made up for this page. Your team's practice emails use the real brands and tools you work with: your own bank, courier and software.
Level 5Spear phishing
Mark Davies<mark.davies@northfield-accountans.co.uk>cc: James Carter, Grace Evans
Re: supplier payment Q3
Hi Sarah,
could you pay this invoice today? The new account number is in the attachment. Thanks!
Mark Davies · Payroll administrator
Invoice_4471.pdf
On Tuesday, James Carter wrote:Mark, can you send Sarah the Q3 supplier invoice? It needs to go out this week.
A colleague you know, in a thread already running, with colleagues in cc. Only one letter in the domain is wrong.
Practice is the best defence.
Start with your team today. The first round is ready within minutes.
Start freeOne platform, one price. No required annual contract, no credit card needed.
* The first 14 days are free. After that your subscription starts automatically, at the price for your team size. Cancel free of charge up to and including day 14.