--- title: "Super Phisher · Brain Security" description: "The phishing simulator that trains your teams on real attacks, from the fake email to the booby-trapped QR code, in a controlled setting that never captures a password." canonical: https://startbrain.io/en-gb/catalog/super-phisher/ lang: en-gb --- # Super Phisher > The phishing simulator that trains your teams on real attacks, from the fake email to the booby-trapped QR code, in a controlled setting that never captures a password. Simulation · SaaS · Phishing simulation ## Overview **Super Phisher** simulates phishing attacks on your teams to reveal the reflexes to strengthen, in a controlled setting. You start from a catalogue of **over 1,300 scenarios** ready to use, filtered by your company profile: it only suggests what genuinely looks like your tools and your languages. Beyond the fake email, the scenarios cover the attacks your people run into today: the **booby-trapped QR code**, the **fraudulent attachment** and the **fake verification page**. Each recipient gets a scenario matched to their language, drawn from **over 100 brands** among the most spoofed. Nothing goes out without a safeguard: a campaign launches **only after approval**, with a signed mandate and a verified domain, and **no password is ever captured**. You can send the lure to yourself before any send. In the debrief, you see who clicked and above all who reported, with your teams’ reporting rate. ## Highlights - **A ready-to-use catalogue** : Over 1,300 scenarios sorted into around twenty pretext families, filtered by your company profile. - **Today’s attacks** : The fake email, but also the booby-trapped QR code, the fraudulent attachment and the fake verification page. - **A controlled setting** : Signed mandate, verified domain, test send to yourself, and never any password captured. - **The debrief that matters** : Who clicked, who reported, reporting rate: the measure that moves your teams forward. ## By the numbers - 1,300+ Ready-made scenarios - 100+ Brands among the most spoofed - 20+ Pretext families - FR · EN Scenario languages ## Specs - Format : SaaS · Phishing simulation for companies - Threats covered : Fake email, booby-trapped QR code, fraudulent attachment, fake verification page - Setting : Signed mandate and verified domain required before any send - Privacy : No password captured, data siloed per client, GDPR purge - Languages : Scenarios in French and English ## Frequently asked questions - **Is it risky for my teams?** No: Super Phisher is an awareness tool. No password is captured, every campaign requires a signed mandate and a verified domain, and you can send the lure to yourself before any launch. - **Which attacks can you simulate?** The fake email, but also the booby-trapped QR code, the fraudulent attachment and the fake verification page. Each recipient gets a scenario matched to their language. - **How do you measure results?** The debrief shows who clicked and above all who reported the attack, with your teams’ reporting rate, campaign by campaign. ## Cyber Culture & Gamification - [Phishing Simulations: Turning a Punitive Trap into Constructive Training](https://startbrain.io/en-gb/cybersecurity/constructive-workplace-phishing-simulations-guide/): Discover how to transform workplace phishing simulations from punitive traps into engaging, effective staff training with guidance from Brain Security. - [AI-Driven Spear-Phishing: Why Spelling Mistakes No Longer Give the Game Away](https://startbrain.io/en-gb/cybersecurity/ai-spear-phishing-spot-flawless-scams/): Discover how to spot AI-generated spear-phishing emails without spelling mistakes. Learn weak signals, context analysis, and out-of-band checks. - [Quishing: How QR Code Phishing Bypasses Corporate Defences](https://startbrain.io/en-gb/cybersecurity/quishing-qr-code-phishing-corporate-security/): Discover how quishing circumvents email filters by shifting attacks to personal smartphones, and learn how to protect your workforce effectively. - [MFA Fatigue and Push Bombing: Bypassing Multi-Factor Authentication Without Exploits](https://startbrain.io/en-gb/cybersecurity/mfa-fatigue-push-bombing-security-guide/): Understand how MFA fatigue and push bombing attacks bypass security controls and train your staff to spot suspicious authentication requests. - [Smishing: How to Train Your Teams Against SMS and Mobile Messaging Attacks](https://startbrain.io/en-gb/cybersecurity/train-teams-against-smishing-mobile-attacks/): Learn how to counter smishing in the workplace. Understand mobile vulnerabilities and build the right reflexes to protect your workforce. - [BEC Attacks and Bank Detail Changes: Defeating Vendor Email Compromise](https://startbrain.io/en-gb/cybersecurity/bec-attacks-fraudulent-bank-details-supplier-fraud/): How do you spot fraudulent bank detail changes when a supplier mailbox is hijacked? Learn key behavioural flags, call-back protocols, and reflex habits. --- - https://startbrain.io/en-gb/catalog/super-phisher/ - [Français](https://startbrain.io/fr/catalogue/super-phisher/) - [Deutsch](https://startbrain.io/de/katalog/super-phisher/) - [English (US)](https://startbrain.io/en-us/catalog/super-phisher/) - [Español](https://startbrain.io/es/catalogo/super-phisher/) - [Italiano](https://startbrain.io/it/catalogo/super-phisher/) - [Nederlands](https://startbrain.io/nl/catalogus/super-phisher/) - [Português](https://startbrain.io/pt/catalogo/super-phisher/) - [llms.txt](https://startbrain.io/llms.txt)