Every campaign needs a recipient group to work. The recipient group are the users which receive the attack simulation or the awareness content. You can create multiple groups for a single campaign. Groups can be used within LUCY to target users with specific phishing or training campaigns. Many organizations will begin with dividing users into groups by department, location (if you have multiple office locations), or even domains (if there are multiple domains). Recipients can be in as many groups as they need to be in, and you can have an unlimited number of groups set up.
Recipients and groups can be configured under Admin/Recipients.
You can either add them manually (1), import them (2) or search the internet by using the “SCAN FEATURE” (3). The groups are always defined globally and you can re-use them among different campaigns.
We recommend importing them because it will enable you to create a custom text file with additional information about each target user (e.g. defining the division or location where they work). This information can later be used for automatic analysis and statistics. The more information you provide, the better.
Note: Searching the internet without a Bing or Google API won't get you the same results as if you searched directly with a search engine.
You can import the recipients via file or via LDAP. There is no restriction on the number of recipients you can add to a group (even though your license might restrict the sending of all mails).
SYNTAX: LUCY requires a special syntax. Otherwise it will throw an error. In LUCY version > 3.1 it will continue the import with the correct recipients. In an awareness or phishing campaign which is send via email, it will need at least the mail address as a mandatory field. All other fields are voluntary.
The import file should contain one recipient per line. Each record should consist of 1 to 7 columns separated by the colon symbol (:). All columns, except for the first one, are optional. If you want to skip the column value, just don't type anything between columns separators (:). You can skip the columns at the end of the record - for example, if you have only Email and Name, you can just specify these 2 columns. The email address is mandatory for the Recipient list. All other fields (like Name) are compulsory. If you want to send a personalized email (using the %name% variable within the email or landing page) you need to define the Name field too. The possible columns are:
Note about language: if you upload a recipient group file (txt or CSV) and want to specify the language you need to use the English description (example “spanish”).
FILE FORMAT: You can import a plain text file (.txt) or -csv format and name it as you want.
EXAMPLE: Your CSV or TXT file should look something like this:
LUCY allows you to add multiple groups in one campaign. After you added a group, you will be asked to define:
The default mapping is “campaign and awareness”. This means the user group will recieve the phishing simulation and if configured, also the elarning content. If you wish, you can limit the mapping to “awarness only” or “campaign only”. If you for example configure “campaign only”, the according group would only get the attack simulation, but no elearning.
The scenario association can be used to control, which group gets which attack scenario. In the screenshot you see (2) that all the available scenarios added to the campaign will be displayed. Example: If you select 2 scenarios with a specific group, each user from this group will get two emails (one from scenario 1 and one from scenario 2). If you don't want the users to get multiple emails, you can enable the checkbox “Distribute users over selected scenarios”. Lucy will then randomly split the users over the selected scenarios. Every user will get a unique single attack and no user will be attacked with the same scenario twice. If you want to control the distribution of receivers even more deeply, you would have to create a scheduler rule. This allows the distribution to be even more complex.
In LUCY you can add recipients to a running campaign. Please click here to read more.
LUCY is able to deal with multiple languages within the same recipient group. It is not necessary to define different groups for each language. Please consult this section for more information.
LUCY > 3.0 allows you to identify recipients that have been previously tested. If you click on the recipient group details you will notice that there is a column called “already tested” which shows you the last date this user has been tested.
After importing your mail recipients you will see a search field that allows you to search & filter specific emails in your list:
You can load a group into LUCY and then uncheck users, you don't want to test or train in this specific campaign. Just click on the according checkbox:
Under the statistics/recipient tab you will have a table view of all recipients used in a campaign. In the last column you can (1) re-send an attack to a specific user, (2) edit the users detail or (3) remove the user stats from the specific campaign:
LUCY allows you to copy one or multiple recipients from one group to another group (new or existing).
LUCY > 3.1 will create an import error log which will help you to quickly identify import errors with mail addresses that had a syntax error. For LUCY < 3.1 please click here. Please not that LUCY cannot handle wrong syntax. Also don't use header lines. Duplicate or wrong entries will not be imported.
In LUCY > 3.3 you have the ability to create custom recipient fields. You can add any new recipient attribute you want (e.g. city, gender, education etc.). Those attributes can be used for using customized statistics in LUCY (dashboard filters or raw exports).
In order to create a new custom field go to recipients. Under the recipient link you will find the “custom field” link:
The new recipient attribute (can be freely chosen) is then added as a new attribute in the recipient list: