Vishing scenarios correspond to the attacks you can simulate through the Arsen vishing module.
1 – Objectives
To navigate the scenario library
To select a relevant scenario for your vishing campaigns
To create or duplicate a vishing scenario in order to customize it
2 – Prerequisites
To have access to the Vishing module in the Arsen platform
To have permissions allowing you to view, edit, or create scenarios
3 – What is a vishing scenario?
A vishing scenario is defined by its multi-channel approach. It includes three components:
A phone call, with possible follow-ups
An email, sent after the call
A landing page, displayed if the employee clicks the link in the email
4 – Filtering the scenario library
To access the list of scenarios, click Scenarios in the Vishing section of the navigation menu.
The library can be filtered using several options:
Scenario language
Difficulty level
Vendor (brand or provider used as pretext)
Search field (by scenario name)
Threat type
You also have access to the My Scenarios tab, which gathers:
the scenarios you have edited
the scenarios you have created
5 – Knowing the available actions for a scenario
There are two types of vishing scenarios.
Extraction scenariosare pure vishing scenarios: we analyze the phone conversation and are able to determine whether the employee disclosed sensitive information during the call.
Phone to phish scenariosare multi-channel scenarios. They start with a phone call that leads to sending an email containing a classic phishing link, which results in a "traditional" compromise involving credential theft.
5.1 – Preview Call
This is the only possible action for extraction-type scenarios. And it is one of the 4 possible actions for phone-to-phish scenarios.
To preview the call.
Click Preview Call on the scenario card
A window opens, displaying a call simulation with its parameters.
Enter a phone number in Phone Number field
To click the
📞icon to launch and test the scenario’s voice call
5.2 – Preview the email
Preview the email sent at the end of the phone conversation for a phone to phish scenario.
5.3 – Preview the landing page
Preview the landing page designed to push the employee toward compromise.
5.4 – Duplicate a scenario
Creates a copy of the scenario, which can be edited as needed.
Customize a scenario by clicking Duplicate
📚 Note
The scenario library contains a set of ready-to-use templates reproducing realistic attacks.
Choosing the right scenario is essential: the more credible it is, the harder it will be for employees to detect.
Feel free to edit existing scenarios to introduce variety and contextual elements, making your scenario unique and aligned with your environment.
6 – Creating a new scenario
6.1 – Creating a scenario from scratch
Go to the
My ScenariostabClick
Create a new scenarioTo fully build:
the call script
the email
the landing page
6.2 – Creating a scenario from an existing template
Open the
LibrarytabClick
Duplicateon the desired scenario cardEdit freely:
the phone conversation
the email content
the landing page
These options allow you to adapt scenarios to your internal culture, risks, and training objectives.