Learn in the textbookHuman Security Measures
DefinitionA targeted-email drill (標的型メール訓練) sends staff simulated emails modeled on attacks aimed at a specific organization, to check whether they can see through them and report them.
ExplanationA targeted attack (標的型攻撃) aims at a specific organization with emails posing as messages from business partners or work contacts, and gets in by luring people into opening attachments or links. The drill swaps the real attack for harmless simulated emails and records whether each person opened them and whether they reported them. Tallying the results shows where in the organization training should be focused.
AnalogyIt is like a mystery-shopper check, where someone from head office poses as a customer to see whether staff follow the rules.
Memory hook"Targeted" means aiming at a bullseye: rather than blasting the same email at anyone, the attacker narrows down to one organization. The Japanese 標的 literally means an archery target.