Method for raising personnel awareness of information security using the Gophish software application

In today’s cyberspace, where threats are constantly evolving, phishing attacks require special attention. They are one of the most common social engineering methods used to gain access to confidential information by manipulating users. Such attacks can lead to data breaches, financial losses, and reputational risks. One of the key problems is the lack of staff training in recognizing phishing threats. Traditional training methods do not provide adequate interactivity and realism, which reduces the effectiveness of awareness raising. To address this issue, new approaches are needed that model real-life cyberattack scenarios. The Gophish tool allows you to create personalized phishing campaigns that simulate real attacks and analyze user reactions. Its functionality includes creating email templates, sending messages, and collecting data on user interaction. This allows organizations to identify weaknesses, adjust training programs, and conduct additional training. The results show that using Gophish increases staff awareness of social engineering. Interactive simulations contribute to a better understanding of phishing threats and help users recognize the danger in time. Thanks to the analytics collected, management can quickly implement corrective measures. The development of artificial intelligence and machine learning opens up new opportunities for improving such tools. Future solutions will be able to adapt simulations to specific users, making training even more effective.