1, Exercise purpose
Among the enterprise security threats, the threat from network e-mail has been growing in recent years, because e-mail has become an indispensable part of daily life. Office information notification and communication scheme retention need to be delivered by e-mail. If there is no security awareness related to e-mail, it may be phished, social workers, or even planted Trojans, which is a great security risk for enterprises. Therefore, this time, by imitating a real fishing incident, we conducted safety awareness training to tell employees how to identify and judge whether it is a phishing email in the future, so as to increase the safety awareness of the staff.
In order to better understand the maturity of the company's security awareness, verify the publicity and implementation effect of preventing phishing email in the early stage, improve the security awareness of all staff through simulation training and reduce the risk of information leakage of the company.
2, Drill steps
Phishing mail template (for reference)
All departments and staff:
hello everyone!
Recently, new cases of COVID-19 pneumonia have been confirmed in Yunnan and other regions. In order to strengthen the epidemic prevention and control results, the company emphasizes the epidemic prevention and control requirements again as follows:
1, Employees in all regions should actively pay attention to local vaccination policies, improve epidemic prevention and control awareness, and actively carry out new crown vaccination.
The novel coronavirus pneumonia novel coronavirus vaccine is a novel coronavirus pneumonia epidemic prevention and control system. It is necessary to ensure that the new population is immune to the economic and social order, and quickly form the immune barrier of the population, effectively prevent the spread of the new crown pneumonia virus and ensure the health and safety of our employees. According to the overall plan of the Organizing Committee for the prevention and control of vaccination and the leading group of the epidemic prevention and control work, we will re evaluate the new crown vaccination situation of our staff. Please fill in the following questionnaire or the questionnaire in the annex as required.
2, Questionnaire
Please complete the questionnaire before leaving work on the afternoon of xx, 2021. Thank you for your cooperation.
Please fill in the questionnaire here (malicious link address, click to jump to the malicious page)
XXXX Human Resources Department
July xx, 2021
Overall thinking
1. The form embedded in the front page is responsible for submitting personal information;
2. The back end uses the flash framework to receive and process data;
3. It is necessary to locate the employees who click the link and submit data respectively, and make records for the employees to report and receive phishing emails;
Jump page production (front page)
A form can be made through simple front-end code for employees to fill in information (this page can be modified from the company's system, which is more realistic).
The key codes are as follows:
<form action="http://vps address: Flash port / submit route "method =" post "> < input name =" name "placeholder =" name "required =" required "type =" text "style =" width: 100px; height:45px"/><input name="staff_ ID "placeholder =" job No. "required =" required "type =" text "style =" width: 100px; Height: 45px "/ > < input name =" status "placeholder =" whether inoculated "required =" required "type =" text "style =" width: 100px; Height: 45px "/ > < button class =" but "type =" submit "> submit < / button > < / form >
Page creation after data submission
This time, we use a simple page, submit HTML, as shown below:
Background data receiving and processing
from flask import Flask,jsonify,render_template,request import json import pymysql app = Flask(__name__)#Instantiate app object #The data submitted by the employee is written to the database def mysql(name,staff_id,status): db = pymysql.connect(host = "x.x.x.x",port = xxx,user = "xxx",passwd = "xxx",db = 'xxx', charset='utf8' ) cursor = db.cursor() command = "insert into Library name.Table name (name, staff_id, status) values(%s, %s, %s);" values = (name,staff_id,status) cursor.execute(command,values) db.commit() cursor.close() db.close() #The '/' URL is bound to the submit() function. When opening the home page of the web server, the output of the function will be rendered flask Class run()Method runs the application on the local development server, that is, the above method submit.html page @app.route('/submit', methods=['POST']) def submit(): if request.method == 'POST': name = request.form.get('name') staff_id = request.form.get('staff_id') status = request.form.get('status') print(name,staff_id,status) s = mysql(name,staff_id,status) with open("submit.html","r",encoding = "utf-8") as f: submit_html = f.read() return submit_html if __name__ == '__main__': # run_simple(host, port, self, **options) app.run(host = '0.0.0.0',port = "xxx",debug=True)
Bulk mail sending in python
# coding:utf-8 import xlrd import xlwt import os import smtplib #smtp server from email.mime.text import MIMEText #Message text from email.header import Header #Get mailbox workBook = xlrd.open_workbook(r"Mailbox table path") allSheetNames = workBook.sheet_names() target_Sheet = workBook.sheet_names()[x] target_Sheet_content = workBook.sheet_by_name(f"{target_Sheet}") rows = target_Sheet_content.nrows #cols = target_Sheet_content.ncols print(f"sheet The name of the table is:{target_Sheet}\nsheet Total mailboxes:{rows}") for i in range(0,rows): person_Email = target_Sheet_content.cell(i,0).value #Mail build subject = "[[epidemic prevention and control] update statistics on the vaccination of Xinguan in the third quarter"#Mail title sender = "Sender mailbox"#Sender password = "Sender's email authorization code" recver = person_Email#Receiver content = f"""<html> <html> <head> <title></title> </head> <body> <div style="line-height: 1.7; color: rgb(0, 0, 0);"> <p style="text-align:start; text-indent:0px; -webkit-text-stroke-width:0px; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style=" text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><strong style="-webkit-user-drag:none; - WebKit app region: no drag "> < span style =" font size: 14.5pt "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> departments and all employees: < / span > < / span > < / span > < / span > < / span > < / strong > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span</p> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:29pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style=" text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><strong style="-webkit-user-drag:none; - WebKit app region: no drag "> < span style =" font size: 14.5pt "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> < span style =" font weight: normal "> Hello, everyone! < / span > < / span > < / span > < / span > < / span > < / strong > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / div > <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:29pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style=" text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><strong style="-webkit-user-drag:none; - WebKit app region: no drag "> < span style =" font size: 14.5pt "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> < span style =" font weight: normal Recently, Yunnan and other regions continued to appear in the newly diagnosed cases of COVID-19 pneumonia. As the flow of personnel in summer increased, to strengthen the epidemic prevention and control results, the company again emphasized the epidemic prevention and control requirements as follows: </span></span></span></span></span></span></strong></ span></span></span></span></span></span></span></span></span></span></span></span></span></span> </span></span></span></span></span></div> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:29pt; margin-top:6px; margin-bottom:6px"> <p style="text-indent:27.75pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style=" text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:24px"><strong style="-webkit-user-drag:none; - WebKit app region: no drag "> < span style =" font size: 14.5pt "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> I. employees in all regions should actively pay attention to local vaccination policies, improve awareness of epidemic prevention and control, and actively carry out new crown vaccination. < / span > < / span > < / span > < / strong > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span</p> <p style="text-indent:27.75pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:24px"><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:29px"><span style="font-family:Imitation Song Dynasty">The novel coronavirus pneumonia novel coronavirus pneumonia prevention and control system is to prevent and control the economic and social order, to form a crowd immune barrier quickly, effectively prevent the spread of the new crown pneumonia virus, and ensure the health and safety of our employees.</span></span></span></span></span><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:29px"><span style="font-family:Imitation Song Dynasty">plan,</span></span></span></span></span><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:29px"><span style="font-family:Imitation Song Dynasty"><span style="background-color:#Ffff00 "> now the vaccination status of the new crown vaccine of our employees is counted again. Please fill in the vaccination status in the following questionnaire as required. < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span ></p> <p style="text-indent:27.75pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style=" text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:24px"><strong style="-webkit-user-drag:none; - WebKit app region: no drag "> < span style =" font size: 14.5pt "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> II. Questionnaire < / span > < / span > < / span > < / span > < / span > < / strong > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span ></p> <p style="text-indent:27.75pt; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:24px"><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:29px"><span style="font-family:Imitation Song Dynasty">Please</span></span></span></span></span><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:29px"><span style="font-family:Imitation Song Dynasty"><span style="background-color:#Fff566 "> in the afternoon of x, 2021, < / span > < / span > < / span > < / span > < / span > < / span > < span style =" border: 1pt none windowtext; font-size:14.5pt; Padding: 0cm "> < span style =" - WebKit user drag: None "> < span style =" - WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> complete the questionnaire, thank you for your cooperation. < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span ></p> <div style="background:#eeeeee;border:1px solid #cccccc;padding:5px 10px;"><a href="http://vps ip: port? Email Department No. = {person_email} "> < span style =" font size: 16px "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" color: #000000 "> < span style =" font style: normal "> < span style =" font variant caps: normal "> < span style =" font weight: 400 "> < span style =" letter spacing: normal "><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px "><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="line-height:24px"><span style="border:1pt none windowtext; font-size:14.5pt; Padding: 0cm "> < span style =" WebKit user drag: None "> < span style =" WebKit app region: no drag "> < span style =" line height: 29px "> < span style =" font family: imitation song "> < span style =" color: #ff0000 "> < B style =" WebKit user drag: none- WebKit app region: no drag "> please fill in the questionnaire here < / b > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / a > < / div > </div> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:29pt; margin-top:6px; margin-bottom:6px"> </div> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:29pt; margin-top:6px; margin-bottom:6px"> </div> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:27.75pt; margin-top:6px; margin-bottom:6px"> </div> <div style="text-align:start; -webkit-text-stroke-width:0px; text-indent:27.75pt; margin-top:6px; margin-bottom:6px"> <p align="right" style="text-indent:0px; text-align:right; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="font-size:14px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-family:Helvetica, " Microsoft Yahei", verdana"><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="font-size:14.5pt"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="background-image:initial"><span style="background-position:initial"><span style="background-size:initial"><span style="background-repeat:initial"><span style="background-attachment:initial"><span style=" Background origin: initial "> < span style =" background clip: initial "> < span style =" line height: 29px "> < span style =" font family: imitation song "> XXXX human resources department < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span</p> <p align="right" style="text-indent:0px; text-align:right; margin-top:6px; margin-bottom:6px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="font-size:14px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-family:Helvetica, " Microsoft Yahei", verdana"><span style="border:1pt none windowtext; font-size:14.5pt; padding:0cm"><span style="font-size:14.5pt"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="background-image:initial"><span style="background-position:initial"><span style="background-size:initial"><span style="background-repeat:initial"><span style="background-attachment:initial"><span style=" Background origin: initial "> < span style =" background clip: initial "> < span style =" line height: 29px "> < span style =" font family: imitation song "> xx, xx, 2021 < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span > < / span</p> <p style="text-indent:0px"><span style="font-size:16px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-style:normal"><span style="font-variant-ligatures:normal"><span style="font-variant-caps:normal"><span style="font-weight:400"><span style="letter-spacing:normal"><span style="orphans:2"><span style="text-transform:none"><span style="white-space:normal"><span style="widows:2"><span style="word-spacing:0px"><span style="text-decoration-thickness:initial"><span style="text-decoration-style:initial"><span style="text-decoration-color:initial"><span style="font-family:sans-serif"><span style="line-height:24px"><span style="font-size:14px"><span style="-webkit-user-drag:none"><span style="-webkit-app-region:no-drag"><span style="color:#000000"><span style="font-family:Arial"> </span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></span></p> </div> </div> </body> </html> """ message = MIMEText(content,"html","utf-8") #Content send content "plain" text format utf-8 encoding format message['Subject'] = subject #Mail title message['To'] = recver #addressee message['From'] = "xxxx Human Resources Department<Sender mailbox>" #Sender #Instantiate the smtp server. I use the 163 mailbox smtp = smtplib.SMTP_SSL("smtp.163.com",994) #Sender login smtp.login(sender,password) #as_string encapsulates the message of message smtp.sendmail(sender,recver,message.as_string()) print(f"The first{i+1}Email:{person_Email}Send complete!") smtp.close()
The above code contains < a href=“ http://vps IP: port? Email = department number {person_email} ">. Use url to splice email accounts to count whether to click the link (which can be viewed in the web access log). The department number is convenient for subsequent data statistics and summary.
After the user enters and submits the data, it will be written directly to the database, which can locate the individual employee.
Unified script
After initiating the phishing email test, we will receive the report from the employee. We need to unify the script to avoid revealing the stuffing in advance. For example: "thank you for your feedback. Let's first confirm whether the email is a phishing email. Please don't do anything before confirmation. We will notify you immediately after confirmation. Thank you."
Tracking and statistics
According to the test results of phishing mail, relevant information needs to be collected by department.
Conduct training
Repeat the fishing email drill, display the data in the previous step, and train employees on information security awareness. This paper introduces the common types of phishing emails, how to prevent them, and the ways to report after receiving phishing emails.
repeat
Regularly carry out phishing email test to avoid employees lowering their vigilance after a long time. For new employees, they may lack relevant information security awareness training, and improve information security awareness through real exercises. Keep up with the popular phishing email attack method, and compare it with the previous test after each test to check whether the unsafe behavior of employees has been improved. Summarize the shortcomings and areas for improvement each time to avoid the same problems in the next test.
First response personnel and contact information of safety problems and incidents
In order to respond to safety incidents in a more effective and timely manner, the first responder and department head of safety incidents are identified. The details are as follows:
Contact: Zhang San
Tel.: 11111111
3, Exercise deficiencies
1. Third party mailbox restrictions. The email server blocks ip and email accounts. There are restrictions on sending email every day. It can not be sent at the same time. Messages between departments are synchronized. Subsequent departments should be vigilant when they know the message. Private mail server can be built.
2. If the sending template is single, different types of emails shall be sent according to the work characteristics of different departments;
3. In case of random input, the names of personnel of the whole company can be collected, and the front-end fuzzy matching selection can be used to avoid random input; Or write down the name and job number, and leave the selection box for selection;
4. The sender's email can be easily identified. You can buy a similar domain name of the company to make the phishing email more realistic;