I had this exact same attack in my previous company, and it spread quite rapidly.
HN user
BenjaminN
CEO @ tryriot.com
Thanks!
The pricing is a work in progress.
Damn!
Sure! Pricing is actually very hard to set up.
1. I've talked with a lot of companies (Stripe for example) who do that internally and it takes a tremendous amount of time to set up.
2. For now attacks are very generic, but will soon be sector-based and department-based.
3. Yes for sure it's probably worth adapting the pace of the attacks depending on the level of the employees.
Thanks for the kind words!
Most of them target big companies. It makes a very different product.
I have a fun story with Wombat: I tried to use the product in my previous company (100 employees), had 4 different calls, with 4 different sales persons, during 2 months. At the end they just forgot about me.
Thanks!
1. Import the list of your employees.
2. Whitelist the IP address we use to send the emails.
3. Activate the "phishing simulation" module.
4. Wait and see.
Takes 5 minutes.
I tried Knowbe4, I think it's a horrible product.
I heard once you try the "free service" they call you daily to sign you up for the paid plan.
Depending on your email provider (most of the time it's Google), you need to whitelist the IP address I use to send the emails. It takes probably no more than 4 minutes to do.
I actually started coding in 2000 trying to hack my brother, so I can relate: phishing has been a never-ending story.
It's still worth trying though!
Some people know League of Legends, most don't know Riot Games. And I double checked: Riot Games don't own a trademark for anything related to cybersecurity.
1. There's an option to hide the names of the employees. It would replace all the names with random animal name + a color. It's great if you don't want to know which employees are falling for attacks.
2. I love the idea to actually make the employees create their own attacks, but seems a bit hard to do and pretty much time consuming for a company.
Definitely bad timing. My experience with names: they are never good enough.
What I look for in a name:
1. If I say it out loud, you know how to write it.
2. If I say it out loud today, you remember it tomorrow.
On that 2 criteria, Riot works quite well I think.
YES you did!
I called them just right after that, and I have to say they've been great so far. We agreed I would pay for a dedicated IP, and they now fully support Riot. And having a dedicated IP is actually better, because you can now remove the unexpected warning on Gmail.
Since everyone is moving to remote right now, hackers are enjoying the overall disorganization of companies. I've seen a growing number of phishing attacks for the past few weeks.
I wouldn't be surprised if we get a major data leak caused by COVID-19 in the coming days.
PS: great username by the way.
Great to have BackerKit on board!
That's because you're not a LoL player ;-)
Great question!
1. From Gophish: you need to be technical and you need at least a week off to prepare the attacks. With Riot, you can be sending attacks in a matter of minutes.
2. From Knowbe4, …: those are products made for enterprise companies, that are trying somehow to adapt to smaller companies. Riot is doing the opposite: it was built with smaller companies in mind.
Overall, I think there's a huge need today for product-centric cybersecurity companies, where most of the big players are sales-centric companies.
October | Node.js lead back-end developer | Paris, France | Full-time | On-site | https://www.october.eu/
================
We're a 5 years old European Fintech, reinventing FINANCING for small businesses. We do a marketplace where borrowers get smart and easy financing for their company from private lenders.
We're now 90, operating in 4 countries from offices in Paris, Milano, Madrid and Amsterdam. We raised more than $50m over the last 4 years.
On the tech side, we're Javascript based: node.js on the back-end, EmberJS on the front-end, React Native for the mobile app + a bit of Wordpress. We're currently 12 developers and we're looking for a lead back-end developer who loves good code.
-> You can ping me on Twitter @benjaminnetter
Lendix | Back-end developer (NodeJS) | Paris, France | https://lendix.com
Lendix is the leading crowdlending platform in France. Small companies can borrow money directly from a crowd of +20 000 users, very quickly and very easily. We're a 2 years old startup from Paris. During those two years, the team grew from 3 to 45, we launched a successful marketplace and opened 2 new offices in Madrid and Milan. We're now recruiting a back-end developer who knows NodeJS to join the +8 people tech-team.
Is that guy saying Paypal is crowdfunding? WTF.
"Fast and lightweight" is 200ko?
We have so many choices when it comes to WYSIWYG. My favorite is https://github.com/daviferreira/medium-editor.
Tried "hey how are you?", gives me Haitian first.
Hey man, thanks for linking Somewhere. Funny how Travyde totally stole my design! I'm glad their whole website is awful.
How many of those do we need?
I HATE IT when you have too many search inputs on a page, that don't give you the same results: http://cl.ly/image/3K111v1N1K1y
I'm actually wondering the opposite: why should there be transaction fees? I thought Bitcoin had no necessary transaction fee.
This is awesome. Definitely using this soon.