Create Custom Phishing Templates

Whether you upload your own HTML file or use the built-in WZYWG, this article will show you how to create custom phishing templates with the Phin Template Builder.

• Build Externally and Upload via Phin Template Builder (Recommended)
• Build Directly in the Phin Template Builder
• Preview & Test Your Phishing Templates
• Understanding Injected Fields
• Guide to Building Learning Moments
• Email on Acid's Guide to Building Email Templates

Build Externally and Upload via Phin Template Builder

Video Tutorial

Written Steps w/Images

1. Build your HTML file using a text editor such as Dreamweaver, Atom, or Visual Studio.
   1. Guide to Building Learning Moments
   2. Start Building with Phin's HTML Template
   3. Email on Acid's Guide to Building Email Templates
2. Navigate to the Template Library page from the side navigation under Phishing.
   
3. Start by clicking the "Create a New Template" button and follow these steps. 
   1. Name Your Template and select "Email" from the dropdown.
      1. Click the import button, shown in the screenshot below.
      2. Copy and paste your HTML template into the import modal and click "Import" in the bottom left.
      3. Now, you should see your template within the "Edit Template" section of the builder.
      4. Scroll below the preview to fill in the following information:
         1. Email Subject
         2. Display Name
         3. Sending Name (and choose a sending domain from the drop-down*)
            
            • *Bug: The first option in the drop-down selection for sending domain can not be chosen at this time.
         4. Learning Type(s)
            • Learning Moment: This option is the default and intended method for phishing templates. Action URLs are transformed into dynamic links that bring an end-user to a learning moment page, which walks them through the data intros and data hints in the template (ordered by the attribute data step).
              * Guide to Building Learning Moments
            • Video: This option gives you the ability to make the result of clicking a link in a phishing template direct the user to a training video. This option is NOT currently recommended as the choice of training videos is outdated, and no learning moment is tracked as complete when a user finishes watching the video.
            • Custom URL: This option gives you the ability to make the result of clicking a link lead to a URL of your choosing. User clicks are tracked in the phishing analytics and reporting; however, learning moments are not tracked as complete.
         5. Injected Fields - Match the "Field Name", which is determined by you using Mustache HTML injection (ex: ), to one of the values from the "Selected Values" list. If a default value is available, it will be used as a fallback value in the event that a user's data is not available that matches the selected value.
         6. Tags - These keywords are used to organize phishing templates by phishing category type (ex, notification, purchase, etc.) in the Phin database, as well as determining which types of phishing templates should be selected for continuous phishing campaigns, which is based on what categories are chosen at the time of launching the campaign.
      5. Once you've completed all of the required fields, click the "Save" button in the bottom right corner of the modal.
4. Your new phishing template should now be in the "Your Templates" section at the top of the Phishing Template Library. From this view, you can take the following actions:
   1. Preview - This opens the email in a browser window.
   2. Clone - This duplicates the email template.
   3. Share - This will create and share a copy of the email template across companies, allowing your newly created phishing templates to be launched to audiences in other companies.
   4. Delete - This will delete the email template (this will not delete an email template in other companies if shared).
5. Celebrate the fact that you just created your very own custom phishing template!

Build Directly in the Phin Template Builder

Video Tutorial

Written Steps w/Images

1. Navigate to the Template Library page from the side navigation under Phishing.
   
2. Start by clicking the "Create a New Template" button and follow these steps. 
   1. Name Your Template and select "Email" from the dropdown.
   2. Use the WYZWG component selector on the right side of the screen to build your phishing email.
      • ⚠️ We recommend watching the video tutorial to understand the nuances of using the built-in templating tools. This tool is best used to build simple text emails requesting information with a link.
   3. Once you've completed your email template, scroll below the preview to fill in the following information:
      1. Email Subject
      2. Display Name
      3. Sending Name (and choose a sending domain from the drop-down*)
         
         • *Bug: The first option in the drop-down selection for sending domain can not be chosen at this time.
      4. Learning Type(s)
         • Learning Moment: This option is the default and intended method for phishing templates. Action URLs are transformed into dynamic links that bring an end-user to a learning moment page, which walks them through the data intros and data hints in the template (ordered by the attribute data step).
           * Guide to Building Learning Moments
         • Video: This option gives you the ability to make the result of clicking a link in a phishing template direct the user to a training video. This option is NOT currently recommended as the choice of training videos is outdated, and no learning moment is tracked as complete when a user finishes watching the video.
         • Custom URL: This option gives you the ability to make the result of clicking a link lead to a URL of your choosing. User clicks are tracked in the phishing analytics and reporting; however, learning moments are not tracked as complete.
           
      5. Injected Fields - Match the "Field Name", which is determined by you using Mustache HTML injection (ex: ), to one of the values from the "Selected Values" list. If a default value is available, it will be used as a fallback value in the event that a user's data is not available that matches the selected value.
      6. Tags - These keywords are used to organize phishing templates by phishing category type (ex, notification, purchase, etc.) in the Phin database, as well as determining which types of phishing templates should be selected for continuous phishing campaigns, which is based on what categories are chosen at the time of launching the campaign.
   4. Once you've completed all of the required fields, click the "Save" button in the bottom right corner of the modal.
3. Your new phishing template should now be in the "Your Templates" section at the top of the Phishing Template Library. From this view, you can take the following actions:
   1. Preview - This opens the email in a browser window.
   2. Clone - This duplicates the email template.
   3. Share - This will create and share a copy of the email template across companies, allowing your newly created phishing templates to be launched to audiences in other companies.
   4. Delete - This will delete the email template (this will not delete an email template in other companies if shared).
4. Celebrate the fact that you just created your very own custom phishing template!

Testing Templates