Phishing as a Service: Designing an ethical way of mimicking targeted phishing attacks to train employees

Organisations want to protect themselves against targeted phishing attacks, and mimicking those in order to train their employees in an important measure to do so. However, previous experiments have shown that this is ethically sensitive and might lead to feelings of deception and harm at the side of the employees. In this paper, the design of...