--- title: "Super Phisher · Brain Security" description: "The phishing simulator that trains your teams on real attacks, from the fake email to the booby-trapped QR code, in a controlled setting that never captures a password." canonical: https://startbrain.io/en-us/catalog/super-phisher/ lang: en-us --- # Super Phisher > The phishing simulator that trains your teams on real attacks, from the fake email to the booby-trapped QR code, in a controlled setting that never captures a password. Simulation · SaaS · Phishing simulation ## Overview **Super Phisher** simulates phishing attacks on your teams to reveal the reflexes to strengthen, in a controlled setting. You start from a catalog of **over 1,300 scenarios** ready to use, filtered by your company profile: it only suggests what genuinely looks like your tools and your languages. Beyond the fake email, the scenarios cover the attacks your people run into today: the **booby-trapped QR code**, the **fraudulent attachment** and the **fake verification page**. Each recipient gets a scenario matched to their language, drawn from **over 100 brands** among the most spoofed. Nothing goes out without a safeguard: a campaign launches **only after approval**, with a signed mandate and a verified domain, and **no password is ever captured**. You can send the lure to yourself before any send. In the debrief, you see who clicked and above all who reported, with your teams’ reporting rate. ## Highlights - **A ready-to-use catalog** : Over 1,300 scenarios sorted into around twenty pretext families, filtered by your company profile. - **Today’s attacks** : The fake email, but also the booby-trapped QR code, the fraudulent attachment and the fake verification page. - **A controlled setting** : Signed mandate, verified domain, test send to yourself, and never any password captured. - **The debrief that matters** : Who clicked, who reported, reporting rate: the measure that moves your teams forward. ## By the numbers - 1,300+ Ready-made scenarios - 100+ Brands among the most spoofed - 20+ Pretext families - FR · EN Scenario languages ## Specs - Format : SaaS · Phishing simulation for companies - Threats covered : Fake email, booby-trapped QR code, fraudulent attachment, fake verification page - Setting : Signed mandate and verified domain required before any send - Privacy : No password captured, data siloed per client, GDPR purge - Languages : Scenarios in French and English ## Frequently asked questions - **Is it risky for my teams?** No: Super Phisher is an awareness tool. No password is captured, every campaign requires a signed mandate and a verified domain, and you can send the lure to yourself before any launch. - **Which attacks can you simulate?** The fake email, but also the booby-trapped QR code, the fraudulent attachment and the fake verification page. Each recipient gets a scenario matched to their language. - **How do you measure results?** The debrief shows who clicked and above all who reported the attack, with your teams’ reporting rate, campaign by campaign. ## Cyber Culture & Gamification - [Phishing Simulations in the Enterprise: Turning Gotchas into Real Training](https://startbrain.io/en-us/cybersecurity/enterprise-phishing-simulations-from-gotcha-to-training/): Discover how to transform enterprise phishing simulations from punitive traps into engaging learning experiences that build a strong security culture. - [AI-Powered Spear-Phishing: Why Typos Are No Longer a Telltale Sign](https://startbrain.io/en-us/cybersecurity/ai-powered-spear-phishing-without-typos/): Discover how to detect AI-generated spear-phishing emails without typos. Learn critical context cues, out-of-band verification, and modern defense habits. - [Quishing: How QR Code Phishing Bypasses Corporate Email Defenses](https://startbrain.io/en-us/cybersecurity/quishing-qr-code-phishing-corporate-defenses/): Discover how quishing circumvents email filters by shifting attacks to personal mobile devices, and learn how to effectively protect your organization. - [MFA Fatigue and Push Bombing: Bypassing Multi-Factor Authentication Without Cracking Code](https://startbrain.io/en-us/cybersecurity/mfa-fatigue-push-bombing-bypass-guide/): Understand MFA fatigue and push bombing attack mechanics. Train your workforce to spot suspicious prompts and safeguard your identity infrastructure. - [Smishing Defense: How to Train Your Workforce Against SMS Attacks](https://startbrain.io/en-us/cybersecurity/smishing-defense-train-workforce-sms-attacks/): Stop smishing attacks across your organization. Understand mobile vulnerabilities and build practical reflexes to protect corporate credentials. - [BEC Attacks and Wire Fraud: Stop Vendor Bank Detail Scams](https://startbrain.io/en-us/cybersecurity/bec-attacks-vendor-bank-fraud-detection/): Learn how to detect fake bank account updates when vendor emails are hacked. Master out-of-band verification and behavioral red flags. --- - https://startbrain.io/en-us/catalog/super-phisher/ - [Français](https://startbrain.io/fr/catalogue/super-phisher/) - [Deutsch](https://startbrain.io/de/katalog/super-phisher/) - [English (UK)](https://startbrain.io/en-gb/catalog/super-phisher/) - [Español](https://startbrain.io/es/catalogo/super-phisher/) - [Italiano](https://startbrain.io/it/catalogo/super-phisher/) - [Nederlands](https://startbrain.io/nl/catalogus/super-phisher/) - [Português](https://startbrain.io/pt/catalogo/super-phisher/) - [llms.txt](https://startbrain.io/llms.txt)