Developers: | Phishman (Fishman), MTS RED (formerly MTS Cybersecurity) |
Technology: | SaaS - Software as a service, information security - Fraud detection system, Distance learning systems |
2023: MTS RED Managed Cybersecurity Services Portfolio Inclusion Plan
On April 25, 2023, the MTS Group informed TAdviser about investing through its MTS corporate venture capital fund in Phishman, a Russian developer of automated systems for analyzing, testing and training company employees in methods of protection against cyber attacks. Under the terms of the deal, the volume of investments will be 90 million rubles.
As a result of the transaction, Phishman products will be included in the portfolio of managed cybersecurity services MTS RED. The transaction is one of the stages of the implementation of MTS RED's strategy to form a product portfolio that will provide full coverage of all types of cyber threats through a single interface. Read more here.
2017: Principle of operation
As of May 10, 2017, the Phishman is a system for raising awareness of personnel.
The PhishMan system pretends to be an intruder and sends emails with various traps, evaluating the user's actions upon receiving the letters: if the user is "caught," the system records his actions and selects an individual training program for him.
User Training:
- PhishMan sends a link to the training program (presentation material on the identified problem) to the user by mail with a mandatory check of the learned material upon its passage (user testing);
- The software helps to train users without first collecting information about their level of awareness.
User Control:
- The technology periodically repeats the sending of emails with a "trap" to the user, promptly monitoring problems with the level of knowledge of users.
The system trains them, tests them and continues to maintain control of staff awareness and preparedness to respond to phishing attacks.
The product is provided to the user as a service. Training materials and tests are finalized by the service provider.
Users are trained only in skills and knowledge that they do not own.
As part of the reporting:
- user error statistics,
- list of trained users,
- list of users who have confirmed the level of knowledge,
- List of users repeating errors.