What are you looking for?

Phished offers businesses and (public) organisations the tools to train their employees in cybersecurity topics and to give them a greater awareness of the digital dangers. An important aspect of this is anti-phishing training.

To cybercriminals, your vendors can be an attractive backdoor into your organization—and unfortunately, it's happening more often than you might think. A seemingly trustworthy partner can unknowingly pave the way for phishing attacks, data breaches, or full-scale supply chain compromises in your company. With the rollout of the NIS2 directive, this threat is more pressing than ever: organizations now need to demonstrate not only their own cybersecurity maturity, but also that of their vendors. 

Getting hacked only happens to the ill-advised or the low-skilled? Cybersecurity specialist Arnout Van de Meulebroucke speaks from experience when he says: “It will happen to you.”

Smartphoto is an e-commerce company offering photo printing services across 12 European countries. Among the many emails processed daily by their customer service team, phishing attempts are a frequent threat – one of which unfortunately resulted in a successful ransomware attack in the past. This made a specialised Security Awareness Training essential for all 180 employees – a challenge easily handled by the Phished platform.

Just sending out phishing simulations is no guarantee for not getting hacked. Incident data confirms companies benefit much more from holistic training, teaching your co-workers to adopt an overall cyber security mindset. I’ll explain how this simple change in approach will impact your company’s cyber resilience.

What you (should) not do if you want your anti-phishing training to be a success

Executing an anti-phishing campaign within your company is the first step in making your employees more alert to cyber threats, but how do you execute this campaign exactly? A thoughtless anti-phishing training program can do more harm than good. It is therefore crucial to use the right strategies when training your employees to recognise phishing emails.

Fake termination letters, revoked vacation approvals, and spoofed salary updates — in 2025, phishing emails posing as HR communications were among the most successful tactics used by cybercriminals.

At the end of 2025, we analyzed 7 million simulated phishing emails sent to 500,000 Belgian employees. The results? One in three clicked on HR-related phishing content. The findings were picked up by major Belgian outlets like Het Nieuwsblad, Het Belang van Limburg, Gazet van Antwerpen, QMusic, Joe FM, Solutions Magazine, and TinyNews. Earlier in the year, a payroll fraud incident involving member of parliament Mathieu Michel had already highlighted just how convincing these types of phishing emails can be.

Even before your company is phished, you need to take action. What steps should you take and how can you prevent this from happening (again)? Phishing expert Arnout Van de Meulebroucke provides six tips.

The COVID-19 pandemic triggered a surge of phishing attacks. In response, Fost Plus began looking for a solution to identify and strengthen the weak points in its cybersecurity strategy.

We’re pleased to see that scientific research has now confirmed what we at Phished have been saying for years: phishing training, in its current and commonly deployed form, simply doesn’t reduce risk. That’s exactly why we built Zero Incident Mail™ — real zero-incident email protection that prevents breaches caused by human error and compensates for what spam filters fail to stop.

Cybersecurity review platform Expert Insights awards Phished no less than two awards.

After an initial baseline measurement, IPCOS came to a remarkable conclusion: almost half of their highly trained employees were susceptible to phishing. Barely four months later, this figure was down to 13% - thanks to Phished.