From: IT Helpdesk <helpdesk@acmecorp-support.co>
Subject: Action required: your password expires today
Dear user, Your mailbox password expires in 2 hours. To keep your current password, verify your account here.
Threat Lab
Eight common attacks, played out step by step. Switch the defence on and off to see exactly what stops each one. Everything here is a simulation with demonstration data.
Attack simulator
Pick an attack, press play, then replay it with the defence on.
Simulation
- Attacker does
- Sends a convincing email that links to a fake sign-in page.
- System sees
- An email from a look-alike domain, then a login from an unusual location.
- Without defence
- The user enters their password and the attacker signs in as them.
Email filteringMFATraining
$ tail -f events.log
You have explored 0 of 8 attacks
The cyber kill chain
Most intrusions pass through the same seven stages. Breaking any one of them stops the attack. Select a stage.
Stage 1 · attacker's goal
Research the target: staff, domains and exposed services.
Where we break the chain
Shrink what is publicly exposed and watch for scanning. Attack surface reviews find it first.
Defence in depth
No single control stops everything. Watch an attack probe inward: each run, a different layer is the one that catches it.
- Probing perimeter layer…
Spot the phish
Four emails. Some are phishing, one is not. Decide, then see the red flags.
Try the terminal
A safe, scripted shell. Try help, scan or explain ransomware.
Ausec demo shell. Nothing here touches a real system.
Type 'help' to see what you can do.