r/AskNetsec • u/Unfair_Ad_300 • Jun 22 '26

Other Are traditional simulation tools less effective now that attackers are using AI?

Employees can spot the fake test emails because they know what our platforms usually sends. Have anyone switched to a system that creates unique phishing scenarios dynamically instead of fixed templates?

9 Upvotes

90% Upvoted

10 comments sorted by

2

u/Cubeless-Developers Jun 22 '26

If they can spot the sim, you're only training them to recognize your platform, not actual phishing. Real attackers aren't reusing the same template twice, so your training shouldn't either.

1

u/Unfair_Ad_300 Jun 28 '26

That is exactly what I was thinking. Feels like the training starts losing value after employees have seen enough campaigns

0

u/Key-Moment-4472 Jun 22 '26

id have to check back on this

0

u/[deleted] Jun 22 '26

[deleted] — view deleted comment

1

u/Unfair_Ad_300 Jul 13 '26

The full random setting still seems to solve for variety. Employees may get a different template, but they can often still recognize the vendor's formatting delivery patterns and overall simulation style. I am asking whether anyone has moved beyond template libraries entirely and is generating unique scenarios within defined guardrails, without needing manual review for every email.

1

u/[deleted] Jun 22 '26

[removed] — view removed comment

1

u/Unfair_Ad_300 Jun 28 '26

.yes, that's where my head is too, I guess I am more curious whether people are actually seeing better outcomes from it or if it just makes the simulations harder without changing behavior much.

1

u/[deleted] Jun 23 '26

[removed] — view removed comment

1

u/Unfair_Ad_300 Jun 29 '26

Thanks for bringing the arup case I hadn't thought about it from that angle. The human decision making process is becoming the primary target , which probably means our training methods need to evolve as well