If you're doing physical penetration tests or testing the human component of security, it's inevitable that you'll come across the need to write some phishing emails.  Here are five elements to get a better click-through-ratio (CTR). 1. The Subject is the Headline One of the first things that people see in pretty much any email software is the subject line.  This means that the subject line fulfills the same role as the headline in advertising: it pulls the reader in.  Here are some things … [Read more...]