We ensure that employees are unaware of testing and can follow all the steps of real-world attackers: Gathering information about the company and target employees from open sources. Creating a story for the attack, which is easy to buy into. Sending real emails and SMS, making real phone calls.