Arsen Security Blog

Deepfake executive fraud simulation: test your team against a fake executive on a live video call

Deepfake executive fraud simulation: test your team against a fake executive on a live video call
Alexandre Esser
Product

Attackers can now stage ultra-realistic video calls using deepfakes of executives or colleagues to trick employees into granting access to internal systems and sensitive data. Arsen Deepfake Video Call Simulations let your team experience these attacks safely, before real...

ClickFix Attack via Deepfake Video Call: How the Fake Update Prompt Works

ClickFix Attack via Deepfake Video Call: How the Fake Update Prompt Works
Thomas Le Coz
Social Engineering

A ClickFix attack can be the last step of a deepfake video call: the audio fails, a fake update prompt appears, and the victim runs the attacker's code. Here is how it works.

How to Choose a Deepfake Attack Simulation Platform: 7 Options Compared

How to Choose a Deepfake Attack Simulation Platform: 7 Options Compared
Arsen Team
AI Attacks

How to choose a deepfake attack simulation platform: seven vendors compared on meeting format, who builds the scenarios, channels and reporting.

PSD3, PSR and IPR: What the New EU Payment Rules Mean for Social Engineering Defense

PSD3, PSR and IPR: What the New EU Payment Rules Mean for Social Engineering Defense
Alex Beaurepaire
Cybersecurity

PSD3 and the PSR move more fraud losses onto payment providers, including bank staff impersonation scams. What the rules require, and how to make your people a control you can evidence.

Deepfake Detection Tools: What They Catch, and What They Can't

Deepfake Detection Tools: What They Catch, and What They Can't
Alex Beaurepaire
AI Attacks

An honest review of five deepfake detection tools, what each detects and how it deploys, and why detection is a signal, not a control, when an employee is asked to act.

Financial Services Cybersecurity: 10 Tools Every CISO Should Know

Financial Services Cybersecurity: 10 Tools Every CISO Should Know
Thomas Le Coz
Cybersecurity

Ten tools financial services CISOs use to cover fraud, identity, data, email, voice and human risk, with what each does, who it suits and where it fits in the stack.

Employee Security Score: measure each employee's actual risk from recent behavior

Employee Security Score: measure each employee's actual risk from recent behavior
Alexandre Esser
Product

Read each employee's security score as a measure of actual risk, weighted by recent behavior, reporting, scenario difficulty and training completion.

Interactive Awareness Lessons: train employees by practising real attack situations

Interactive Awareness Lessons: train employees by practising real attack situations
Alexandre Esser
Product

Give employees awareness lessons where they inspect phishing emails, take vishing calls, hear a voice deepfake and order incident steps, instead of reading text and picking one answer.

Phishing Email Import: build phishing scenarios from real-world emails

Phishing Email Import: build phishing scenarios from real-world emails
Alexandre Esser
Product

Create the email of a custom phishing scenario from a real-world email, by uploading an email file or forwarding the message to Arsen, then review and edit the draft before use.

Deepfake vs Vishing vs Phishing: What's the Difference?

Deepfake vs Vishing vs Phishing: What's the Difference?
Alex Beaurepaire
Social Engineering

The three terms get used interchangeably, and that costs security teams real money. They are not variations on the same attack. They run on different channels, exploit different reflexes, and fail...

Microsoft Teams Vishing: How Fake IT Help Desk Calls Get Into Your Network

Microsoft Teams Vishing: How Fake IT Help Desk Calls Get Into Your Network
Thomas Le Coz
Vishing

Between January and April 2026, attackers created external Microsoft Teams tenants named to look like internal IT departments, opened chats with employees, and then immediately placed a voice call...

BEC Simulation: run phishing simulations from your own organization domain

BEC Simulation: run phishing simulations from your own organization domain
Alexandre Esser
Product

Build custom phishing scenarios sent from your own organization domain and measure how employees verify sensitive requests, the behavior business email compromise relies on.

Private Equity Cybersecurity: Inside the UNC6671 Vishing Extortion Scheme

Private Equity Cybersecurity: Inside the UNC6671 Vishing Extortion Scheme
Thomas Le Coz
Vishing

Google Threat Intelligence Group published an analysis of UNC6671, a cluster of extortion operations running help desk vishing against financial services, private equity, and professional services...

View more

Protect Your Business Against Phishing

Discover how our phishing simulations can effectively reduce your human attack surface.

Request a Demo