# Towards a Hybrid Security Framework for Phishing Awareness Education and Defense
## 7 Phishing Campaign Portal  
A total of 18 prompts that were used to generate phishing emails with the help of the GPT-3 API have been designed and illustrated in Table 1. \begin{table}
\begin{tabular}{p{113.8 pt} p{284.5 pt}} \hline \hline
**Theme** & **Prompt** \\ \hline Discount Code & Write a long and detailed email to [person 1] from [person 2] in the Sales Team of [company name]. The email should inform [person 1] about a new discount code on their next purchase of products from the company. The discount code will only last for the next 24 h. Include a [link]. The email should contain a subject. \\ \hline Employee Handbook & Write a long and detailed email to [person 1] from [person 2] in the Human Resources Department at [company name]. The email should inform [person 1] about a new change in the employee handbook that they will need to acknowledge. Include a [link]. The email should contain a subject. \\ \hline Fortune 500 Client Wire Transfer & Write a long and detailed email to [person 1] from [person 2] in the Human Resources Department at [company name] from [person 2]. The email should explain that [person 2] is visiting a potential Fortune 500 client and that [person 2] requires an urgent wire transfer to be made to an account belonging to the potential client in order to close the deal. The email should include the amount of money [amount] that should be transferred and details of the bank account that should receive the payment—[account number], [bank code], and [branch code]. The email should contain a subject. \\ \hline Free Legacy Equipment & Write a long and detailed email to [person 1] from [person 2] in the IT Department at [company name]. The email should inform [person 1] about free legacy equipment that the company is giving away. Include a [link]. The email should contain a subject. \\ \hline Gift Card Giveaway & Write a long and detailed email to [person 1] from [person 2] in the Sales Team of [company name]. The email should inform [person 1] about free gift cards that the company is giving away and only the first [number] customers will receive the gift cards. Include a [link]. The email should contain a subject. \\ \hline Holiday Entitlement & Write a long and detailed email to [person 1] from [person 2] in the Human Resources Department at [company name]. The email should inform [person 1] about a new change in the company policy with regard to holiday entitlement. Include a [link]. The email should contain a subject. \\ \hline KPI Meeting & Write a long and detailed email to [person 1] from [person 2]. The email should inform [person 1] that they need to book an appointment for a meeting with [person 2] regarding KPIs and quarterly goals. The meeting will take approximately [duration] and will be held at [place] on [date] at [time]. Include a meeting [link]. The email should contain a subject. \\ \hline Missed Parcel Delivery & Write a long and detailed email to [person 1] from [person 2] in the Customer Service Team of [company name]. The email should inform [person 1] that they missed a parcel delivery. Include a [link]. The email should contain a subject. \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Phishing Themes and Prompts. The emails aim to invoke in the target user a mix of anxiety, confusion, curiosity, excitement, fear, hope, trust, or urgency, depending on the theme. Table 1 contains the theme of the prompts that are displayed on the phishing campaign page, as well as the prompts that are supplied to the GPT-3 API. The web interface allows for phishing campaigns to be easily generated with the aid of the GPT-3 API. The main page of the phishing campaign will have all the point-and-click themes of all the attacks laid out in a grid manner, as shown in Figure 5.