Creating Phishing User Groups
Creating User Groups for Phishing Simulations
One of the most effective ways to reduce the risk of infostealer infections is to proactively train employees through simulated phishing campaigns. Selki’s User Groups module helps you organize recipients for these simulations and assess how well your teams detect phishing attempts.
This guide walks you through how to create, manage, and populate User Groups for simulation campaigns.
What Are User Groups?
User Groups are customizable collections of employees you want to include in your phishing awareness training. Groups can be organized by department, region, job function, or any structure that fits your organization.
This is especially useful for:
- Targeted phishing simulations
- Segmenting high-risk teams
- Tracking simulation performance by group
How to Create a User Group
Go to User Groups
Navigate to the User Groups section in the left-hand menu.
You’ll see an overview of existing groups, including:
- Group name
- Number of members
- Size classification (e.g., Small)
- Security level (e.g., Standard)
- Status (e.g., Active)
Click ➕ Create Group to start a new group.
Fill Out Group Info
In the “Create New Group” window:
Group Name
Give your group a clear, descriptive name
(e.g., Engineering Business Unit, Finance Department)
Add Members
Enter:
- First Name
- Last Name
Click ➕ Add to include the user.
🔒 Domain Restriction Active
Users can only be added if their email matches one of your monitored Watcher domains. This ensures phishing simulations only target verified internal users.
You can also use Bulk Import to upload multiple users via CSV.
Once members are added, click Create Group.
3. Manage Group Members
Once a group is created, you can:
- View or search users in the group
- Add or remove members
- Clone or delete the group if needed
Each group also tracks its update history and security classification.
Why Use User Groups for Phishing Simulations?
Phishing remains one of the top delivery methods for:
- Infostealers like RedLine, Lumma, and Raccoon
- Business email compromise (BEC) attacks
- Ransomware payloads
With Selki’s User Groups and phishing simulation tools, you can:
- Educate your team in a safe, measurable way
- Identify individuals or departments that need additional training
- Build a culture of awareness and resilience
Pro Tips
Do This | Avoid This |
|---|---|
Use real team structures | Adding unrelated users to the same group |
Ensure Watcher domains match emails | Using personal or unmonitored domains |
Regularly rotate group members | Keeping outdated emails in groups |
Run simulations quarterly | Running once a year and forgetting about it |
Need help setting up your first group or campaign? Contact Support or book a walkthrough with a Selki specialist.
Updated on: 08/08/2025
Thank you!