Ransomware drills

Rehearse a ransomware attack without the ransomware

Ransomware usually starts with one opened attachment. Drills send a convincing email carrying a harmless decoy file, record who opens it, and show them a simulated ransom screen they won't forget.

Request a demo All offerings

Ransomware drill

What you get

Ransomware drills at a glance

Benign by design

The decoy is a plain .html file. Opening it records a detonation and shows a simulated ransom screen; nothing on the machine is touched.

Lure library

Ready-made lure emails, built and edited in the same editor as phishing templates.

Reusable decoys

Keep a library of decoy attachments and pair any of them with any lure.

Counts where it matters

Opening a decoy is recorded as a phishing failure, so it feeds the same grades, reports and escalations.

Ready for follow-up

Target everyone who opened a decoy with training on handling attachments safely.

Same campaign controls

Scheduling, targeting and results work exactly like a phishing campaign.

How it works

From set-up to results

1
Pick a lure and decoy
Choose an email from the ransomware library and the decoy file it carries.
2
Run the drill
Target your groups and launch on a schedule, as with any campaign.
3
Debrief
See who opened the attachment, then enrol them in training on safe attachment handling.

Capabilities