Wombat offers creative training solutions
Read Our Comic Strips
PhishGuru™ comic strips can help you learn to protect yourself, your employees and your friends from phishing attacks. They are part of Wombat's anti-phishing training and assessment tool that allows you to send simulated phishing messages to your employees to assess their cyber security readiness and provide targeted training to those who need it most.
Here is a sample of our PhishGuru™ cartoons. Please contact us for information about licensing.
General Help
Gives six useful tips to help you avoid being scammed by a phisher. Download it as a PDF.
Play Our Game
Anti-phishing education can be as easy and fun as playing a game! In about 10 minutes you can learn the basics of how to spot phishing attacks. Try out our game, Anti-Phishing Phil™, the first two rounds are free online for anyone to play. For information about using the full Anti-Phishing Phil™ training game contact us for licensing information.
This screenshot from our game shows an incorrect choice being made by Phil. He trusted the URL on screen, but PhishGuru is reminding him not trust URLs with numbers first.
About Wombat Security Technologies
Wombat Security Technologies delivers compelling cyber security awareness and training solutions based on sound learning science principles. Wombat's solutions are designed to be engaging and interactive and have been scientifically shown to be significantly more effective than traditional training solutions. Wombat's products include interactive games and embedded training solutions that create unique "teachable moments", where users are most prone to pay attention and retain knowledge. Wombat's products are easy to deploy and maintain and are used in sectors as diverse as finance, government, defense, telecom, health care, retail, education, transportation & utilities, IT and the service industry to name just a few. With several hundred thousand users across North America, Europe and Asia, Wombat Security Technologies has established itself as a global leader in cyber security awareness and training. The company's solutions have received many accolades from industry and the media and have been the subject of feature articles in high profile publications such as Scientific American as well as many business and trade publications. Find out more at WombatSecurity.com
About PhishGuru™
PhishGuru™ is an email-based anti-phishing training system in which training messages are designed to look like phishing messages. When users "fall" for our messages, we take advantage of the "teachable moment" and immediately teach them how to avoid falling for real scams. Our studies demonstrate that PhishGuru effectively teaches people what cues to look for to distinguish scams from legitimate email.
Academic Publications
School of Phish: A Real-Word Evaluation of Anti-Phishing Training. P. Kumaraguru, J. Cranshaw, A. Acquisti, L. Cranor, J. Hong, M.A. Blair, and T. Pham. SOUPS 2009. [Originally published as CyLab Technical Report CMU-CyLab-09-002, 2009]
Anti-Phishing Landing Page: Turning a 404 into a Teachable Moment for End Users P. Kumaraguru, L. Cranor, and L. Mather. CEAS 2009.
P. Kumaraguru, Y. Rhee, S. Sheng, S. Hasan, A. Acquisti, L. Cranor and J. Hong. Getting Users to Pay Attention to Anti-Phishing Education: Evaluation of Retention and Transfer. Proceedings of the 2nd Annual eCrime Researchers Summit, October 4-5, 2007, Pittsburgh, PA, p. 70-81.
Sheng, S., Magnien, B., Kumaraguru, P., Acquisti, A., Cranor, L. F., Hong, J., and Nunge, E. Anti-phishing phil: The Design and Evaluation of a Game that Teaches People Not to Fall for Phish. In SOUPS '07: Proceedings of the 3rd symposium on Usable privacy and security, New York, NY, USA, March 2007, ACM, pp. 88 - 99.
P. Kumaraguru, S. Sheng, A. Acquisti, L. Cranor, F. L., and J. Hong. Teaching Johnny Not to Fall for Phish. Teaching Johnny Not to Fall for Phish. Tech. rep., Carnegie Mellon University, February, 2007.
P. Kumaraguru, Y. Rhee, A. Acquisti, L. Cranor, J. Hong, and E. Nunge. Protecting People from Phishing: The Design and Evaluation of an Embedded Training Email System. CHI 2007: Conference on Human Factors in Computing Systems, San Jose, California, 28 April - May 3, 2007, 905-914. [Originally published as CyLab Technical Report CMU-CyLab-06-017, 2006]
For our full set of educational messages please contact us to discuss using the PhishGuru System in your workplace.