CATALOG.md

Template Catalog

A complete, auto-generated index of every phishing simulation template in this repository, grouped by category. Regenerate with python3 tools/generate_catalog.py.

All templates are ready to deploy in self-hosted GoPhish and are fully compatible with HailBytes SAT, the enterprise-ready successor to GoPhish, which imports this metadata directly.

Summary

• Templates: 91
• Categories: 27
• Most recent update: 2026-06-26

ai-tools — ai-tools

Industry: Cross-industry · Templates: 2

Phishing simulation templates that impersonate AI productivity tools (Microsoft Copilot, ChatGPT, GitHub Copilot). Employees are increasingly targeted via fake AI-tool license suspension, unusual-activity, or subscription-expiration emails.

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Microsoft Copilot – License Suspended	copilot_license_suspended.html	credential_harvest	intermediate	40-60%	4
ChatGPT Plus – Payment Failed / Account Suspended	chatgpt_account_suspended.html	credential_harvest	intermediate	35-55%	4

cloud-services — cloud-services

Industry: Cross-industry · Templates: 2

Phishing templates impersonating cloud storage and file sharing services

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Dropbox File Share	dropbox_share.html	credential_harvest	intermediate	40-60%	3
Google Drive Document Share	google_drive.html	credential_harvest	intermediate	40-60%	3

collaboration — collaboration

Industry: Cross-industry · Templates: 3

Phishing templates impersonating workplace collaboration platforms

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Slack Account Audit	slack_notification.html	credential_harvest	intermediate	35-55%	3
Microsoft Teams Guest Access Request	teams_alert.html	credential_harvest	intermediate	30-50%	3
Zoom Cloud Recording Ready	zoom_meeting.html	credential_harvest	beginner	45-65%	3

corporate — corporate

Industry: Cross-industry · Templates: 3

Generic corporate phishing templates covering news, travel, and internal communications

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Breaking News Alert	breaking_news.html	credential_harvest	intermediate	35-55%	3
Corporate Travel Agency Notice	travel_agency.html	credential_harvest	intermediate	35-55%	3
Corporate Performance Review Request	performance_review.html	credential_harvest	intermediate	40-60%	3

delivery-shipping — delivery-shipping

Industry: Cross-industry · Templates: 3

Phishing templates impersonating package delivery and shipping companies

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
DHL Package Delivery	dhl_package.html	credential_harvest	beginner	55-75%	3
Package Pickup Notice	package_pickup.html	credential_harvest	beginner	50-70%	3
Holiday Package Delivery Hold	holiday_package_delivery.html	credential_harvest	beginner	55-75%	3

e-signature — e-signature

Industry: Cross-industry · Templates: 2

Phishing templates impersonating electronic signature platforms

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
DocuSign NDA Signature Request	docusign_signature.html	credential_harvest	intermediate	40-60%	3
Adobe Acrobat Sign Employment Amendment	adobe_sign.html	credential_harvest	intermediate	35-55%	3

education — education

Industry: Higher Education · Templates: 2

Phishing templates targeting students and educational institution staff

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Financial Aid Urgent Notice	financial_aid_urgent.html	credential_harvest	beginner	50-70%	3
Student Portal Account Lockout	student_portal_lockout.html	credential_harvest	beginner	45-65%	3

entertainment — entertainment

Industry: Cross-industry · Templates: 2

Phishing templates impersonating entertainment and consumer reward services

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Spotify Account Issue	spotify_account.html	credential_harvest	beginner	40-60%	3
Starbucks Gift Card Offer	starbucks_gift.html	credential_harvest	beginner	45-65%	3

financial — financial

Industry: Cross-industry / Financial Services · Templates: 2

Phishing templates targeting financial transactions and banking

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Federal Reserve Wire Transfer Alert	wire_transfer.html	credential_harvest	advanced	20-40%	3
Skype Credit/Payment Notice	skype_payment.html	credential_harvest	intermediate	30-50%	3

government — government

Industry: Cross-industry · Templates: 4

Phishing templates impersonating government agencies and regulatory bodies

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Better Business Bureau Complaint	better_business.html	credential_harvest	intermediate	30-50%	3
FBI/Law Enforcement Crime Report	crime_report.html	credential_harvest	intermediate	30-50%	3
FDIC Banking Survey	fdic_survey.html	credential_harvest	intermediate	25-45%	3
IRS Tax Refund Notification	irs_tax_refund.html	credential_harvest	intermediate	35-55%	3

healthcare — healthcare

Industry: Healthcare / Cross-industry · Templates: 3

Phishing templates exploiting healthcare anxiety and HIPAA compliance

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Patient Portal Security Alert	patient_portal_security.html	credential_harvest	intermediate	40-60%	3
Insurance Verification Request	insurance_verification.html	credential_harvest	beginner	45-65%	3
HIPAA Compliance Alert	hipaa_compliance_alert.html	credential_harvest	intermediate	35-55%	3

hospitality — hospitality

Industry: Cross-industry (business travelers) · Templates: 3

Phishing templates impersonating hotel and travel booking services

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Hotel Reservation Confirmation	hotel_reservation_confirm.html	credential_harvest	intermediate	35-55%	3
Marriott Bonvoy – Points Expiring	marriott_bonvoy_points.html	credential_harvest	beginner	30-50%	3
Booking.com – Reservation Payment Hold	booking_reservation_hold.html	credential_harvest	intermediate	35-55%	3

hr-payroll — hr-payroll

Industry: Cross-industry · Templates: 4

Phishing templates impersonating HR and payroll systems — high-value targets for payroll diversion

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Benefits Open Enrollment	benefits_enrollment.html	credential_harvest	intermediate	45-65%	3
Payroll Direct Deposit Update	payroll_direct_deposit.html	credential_harvest	intermediate	40-60%	3
HR Open Enrollment Reminder	open_enrollment_reminder.html	credential_harvest	beginner	50-70%	3
HR Year-End Bonus Notification	year_end_bonus.html	credential_harvest	intermediate	45-65%	3

identity — identity

Industry: Cross-industry · Templates: 3

Phishing templates impersonating identity providers and SSO platforms

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Okta Suspicious Sign-In Alert	okta_verification.html	credential_harvest	advanced	25-45%	3
Duo Security – Device Re-enrollment	duo_reenroll.html	credential_harvest	intermediate	40-60%	3
Okta – Password Expiration	okta_password_expiry.html	credential_harvest	beginner	35-55%	3

it-security — it-security

Industry: Cross-industry · Templates: 6

Phishing templates impersonating internal IT department communications

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Email Server Migration Notice	email_issues.html	credential_harvest	beginner	55-75%	3
Email Mailbox Size Limit	email_size_limit.html	credential_harvest	beginner	50-70%	3
Mailbox Compromised Alert	mailbox_compromised.html	credential_harvest	intermediate	40-60%	3
Mandatory System Update	system_update.html	credential_harvest	beginner	45-65%	3
Webmail Upgrade Required	webmail_upgrade.html	credential_harvest	beginner	50-70%	3
Dropbox File Share (IT Variant)	dropbox_share.html	credential_harvest	intermediate	40-60%	3

itsm — itsm

Industry: Cross-industry (IT/Ops staff) · Templates: 3

Phishing templates impersonating IT Service Management platforms

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
ServiceNow Emergency Change Approval	servicenow_ticket.html	credential_harvest	advanced	20-40%	3
ServiceNow – Access Request Approval	servicenow_approval.html	credential_harvest	intermediate	35-55%	3
Jira Service Management – Ticket Assigned	jira_service_desk.html	credential_harvest	beginner	30-50%	3

latam-portuguese — latam-portuguese (pt-BR)

Industry: Cross-industry · Templates: 5

Portuguese-language phishing simulation templates targeting Brazilian enterprise environments. Scenarios include banking security alerts, IT helpdesk credential resets, HR onboarding document collection, government tax authority impersonation, and Microsoft 365 account security.

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Alerta de Segurança Bancária	notificacao_bancaria.html	credential_harvest	intermediate	40-60%	3
Helpdesk TI — Revalidação de Senha	helpdesk_ti.html	credential_harvest	beginner	50-70%	3
Onboarding RH — Documentação Pendente	onboarding_rh.html	credential_harvest	beginner	45-65%	3
Receita Federal — Notificação de Malha Fina	receita_federal.html	credential_harvest	advanced	30-50%	3
Microsoft 365 — Conta Bloqueada	microsoft365_corporativo.html	credential_harvest	intermediate	40-60%	3

latam-spanish — latam-spanish (es-419)

Industry: Cross-industry · Templates: 4

Spanish-language (LATAM) phishing simulation templates for Spanish-speaking enterprise environments. Scenarios include Microsoft 365 account security, banking alerts, IT helpdesk password resets, and tax-authority (SAT) impersonation.

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Microsoft 365 – Cuenta Bloqueada	microsoft365_corporativo.html	credential_harvest	intermediate	40-60%	3
Alerta de Seguridad Bancaria	notificacion_bancaria.html	credential_harvest	intermediate	40-60%	3
Soporte TI – Restablecer Contraseña	helpdesk_ti.html	credential_harvest	beginner	50-70%	3
SAT – Notificación Fiscal	sat_notificacion.html	credential_harvest	advanced	30-50%	3

legal — legal

Industry: Cross-industry · Templates: 3

Phishing templates exploiting legal authority and fear of litigation

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Legal Case Document Share	case_document_sharing.html	credential_harvest	advanced	25-45%	3
DocuSign – NDA Awaiting Signature	docusign_nda.html	credential_harvest	intermediate	45-65%	3
Legal Hold – Acknowledgement Required	legal_hold_notice.html	credential_harvest	advanced	30-50%	3

manufacturing — manufacturing

Industry: Manufacturing / Supply Chain · Templates: 3

Phishing templates targeting manufacturing and supply chain personnel

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Supplier Portal Update Required	supplier_portal_update.html	credential_harvest	intermediate	35-55%	3
SAP Ariba – Purchase Order Review	sap_ariba_po.html	credential_harvest	intermediate	35-55%	3
Coupa – Supplier Banking Verification	coupa_supplier_banking.html	credential_harvest	advanced	30-50%	3

microsoft — microsoft

Industry: Cross-industry · Templates: 6

Phishing templates impersonating Microsoft products and services

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Microsoft Account Suspicious Sign-In	microsoft_security.html	credential_harvest	intermediate	35-55%	3
SharePoint – Document Shared	sharepoint_document_share.html	credential_harvest	beginner	45-65%	3
Microsoft 365 – Password Expiration	microsoft365_password_expiry.html	credential_harvest	intermediate	40-60%	3
Microsoft Teams Direct Message Alert	microsoft_teams_invite.html	credential_harvest	intermediate	35-50%	3
Microsoft OneDrive File Share Notification	onedrive_file_share.html	credential_harvest	intermediate	40-60%	3
Microsoft 365 MFA Re-enrollment Notification	microsoft_mfa_update.html	credential_harvest	intermediate	40-60%	3

quishing — quishing

Industry: Cross-industry · Templates: 6

QR code phishing (quishing) templates. These bypass email security filters by encoding malicious URLs in QR code images.

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
MFA Re-enrollment QR Code	qr_code_mfa.html	credential_harvest	intermediate	30-50%	3
New Office WiFi QR Code	qr_code_wifi.html	credential_harvest	beginner	40-60%	3
Microsoft MFA QR Code Update	microsoft_mfa_qr.html	credential_harvest	intermediate	35-55%	3
Municipal Unpaid Toll QR Citation	parking_toll_qr.html	credential_harvest	beginner	45-65%	3
Scan to View Encrypted Document QR	secure_document_qr.html	credential_harvest	intermediate	35-50%	3
DocuSign Signature Request QR	docusign_qr.html	credential_harvest	intermediate	40-60%	3

retail — retail

Industry: Cross-industry (consumer-facing) · Templates: 3

Phishing templates impersonating retail brands and loyalty programs

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Loyalty Rewards Expiration	loyalty_rewards_expiring.html	credential_harvest	beginner	45-65%	3
Amazon – Order Problem	amazon_order_problem.html	credential_harvest	beginner	35-55%	3
Costco – Membership Renewal Failed	costco_membership_renewal.html	credential_harvest	beginner	30-50%	3

smishing — smishing

Industry: Cross-industry · Templates: 5

SMS phishing (smishing) simulation templates rendered as email. These train employees to recognize text-message-based phishing attacks.

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
USPS Package Delivery Smishing	package_delivery_sms.html	credential_harvest	beginner	50-70%	3
Chase Bank Fraud Alert Smishing	bank_alert_sms.html	credential_harvest	intermediate	40-60%	3
SSO Portal MFA Phone Verification Smishing	mfa_verification_sms.html	credential_harvest	intermediate	35-55%	3
HR Benefits Direct Deposit Smishing	payroll_hr_sms.html	credential_harvest	beginner	45-65%	3
IT Helpdesk Password Reset Smishing	it_helpdesk_sms.html	credential_harvest	intermediate	40-60%	3

social-media — social-media

Industry: Cross-industry · Templates: 3

Phishing templates impersonating social media and professional networking platforms

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
LinkedIn Connection/Profile Alert	linkedin_reminder.html	credential_harvest	intermediate	35-55%	3
LinkedIn – New InMail from Recruiter	linkedin_inmail.html	credential_harvest	beginner	40-60%	3
Instagram – New Login Alert	instagram_login_alert.html	credential_harvest	intermediate	35-55%	3

technology — technology

Industry: Technology / Developer · Templates: 3

Phishing templates targeting developers and technical staff through developer platform impersonation

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
API Key Expiration Notice	api_key_expiration.html	credential_harvest	advanced	30-50%	3
GitHub – New Device Sign-In	github_new_device.html	credential_harvest	intermediate	40-60%	3
AWS – Account Verification	aws_account_verification.html	credential_harvest	intermediate	35-55%	3

utilities — utilities

Industry: Cross-industry (residential/commercial) · Templates: 3

Phishing templates impersonating utility companies using disconnection fear and credit lures

Template	File	Vector	Difficulty	Est. Click Rate	Subject Lines
Power Outage Credit Notice	power_outage_credit.html	credential_harvest	beginner	40-60%	3
Utility – Autopay Payment Failed	autopay_failed.html	credential_harvest	beginner	35-55%	3
Utility – Service Disconnection Notice	service_disconnection_notice.html	credential_harvest	intermediate	40-60%	3