What are “Link Checkers”?
“Link Checkers” are systems that automatically access a link (or URL) and/or files from phishing emails.
In addition to the term “Link Checker,” there are also related terms such as URL filtering, URL rewriting systems, and link scanners (e.g., Cisco IronPort). These security systems scan links for malware and thereby generate a Click Event at Hornetsecurity. They also affect the ESI score. We refer to these as “click-through systems” at Hornetsecurity.
Generally, many security programs check URLs to identify potentially dangerous links and files before users open them. This is intended to ensure the security and integrity of online communication and to detect potential threats at an early stage.
How do Link Checkers affect the phishing simulation?
The ESI score, which is a crucial indicator for evaluating the phishing simulation, assesses users’ reactions to potential phishing attacks. It is therefore particularly important that every Click Event on a malicious link or file in the simulated phishing email is performed by a real user. Through interactions by real users, the ESI score can accurately reflect your company’s IT security awareness.
Link Checkers, on the other hand, automatically check links and open files, as well as macros contained within them. Although they register one or more clicks, they transmit only one click directly to our system, and the ESI score is calculated using incorrect data.
How can I identify and eliminate Link Checker systems so that the ESI score is calculated correctly again?
We refer to security programs and other systems that automatically check links as “click-through systems.” To help you identify these click-through systems more effectively, we offer you the option of providing IP log information. Using this information, you can analyze which IP addresses generated a Click Event. This information can be requested from our Support Team.
These security systems also have whitelisting functions integrated. This is an effective way to properly control the use of our SAS services and eliminate click-through systems in order to restore the statistics.