Hello,
I was wondering if anyone else was experiencing the following issue with the Spear Phishing (Attachment) test in the Threat Management module and if you had any fixes or a work around?
Issue: When the phishing campaign is sent, the target opens the .doc and it says you have been phished, this was a test ect. However, it doesn’t record that the target opened the attachment unless the target clicks “enable editing” in the word document.
The issue is when most users open the document and see that it was a phishing test, they will not bother clicking "Enable Editing" and O365 doesn’t record it as being opened, which is giving us inaccurate results. I was poking around and it doesn’t look like there is a way to change the attachment verbiage.
I would like to hear if anyone else has experienced this or if there is a way to change the word document which is sent to the targets.
Thanks,
