Scott Michael Greaux

US Patent:

8635703, Jan 21, 2014

Filed:

Mar 5, 2013

Appl. No.:

13/785215

Inventors:

Aaron Higbee - Leesburg VA, US
Scott Greaux - Glenmont NY, US

Assignee:

PhishMe, Inc. - Chantilly VA

International Classification:

G06F 12/14

US Classification:

726 25, 726 22, 726 23

Abstract:

Described herein are methods, network devices and machine-readable media for conducting a simulated phishing attack on a first group of individuals, and performing an analysis of the group's performance to the simulated attack. In the analysis, an aggregate performance of the first group is compared with an aggregate performance of individuals from a second group. Standardizing the simulated phishing attacks for individuals from both the first and second groups is necessary in order for the performance of the first group to be fairly or meaningfully compared to the performance of the second group. To ensure uniformity in the simulated phishing attacks, messages thereof may be constructed from template messages, the template messages having placeholders for individual-specific and company-specific information.

US Patent:

8615807, Dec 24, 2013

Filed:

Mar 5, 2013

Appl. No.:

13/785127

Inventors:

Rohyt Belani - New York NY, US
Scott Greaux - Glenmont NY, US

Assignee:

PhishMe, Inc. - Chantilly VA

International Classification:

G06F 17/30
G06F 11/00
G06F 12/14

US Classification:

726 25, 726 22, 726 23, 726 24, 726 26

Abstract:

Described herein are methods, network devices and machine-readable storage media for conducting simulated phishing attacks on an individual so as to educate the individual about the various ways in which phishing attacks may be disguised. Specifically described is a simulated phishing attack involving a sequence of messages. At least one of the messages has an associated target action that would ordinary, if the attack were an actual phishing attack, result in the individual's personal information and/or computing device becoming compromised. In the simulated phishing attack, no malicious action is actually performed. At least one of the other messages is designed to draw attention to the message with the target action.

US Patent:

20190364061, Nov 28, 2019

Filed:

Aug 5, 2019

Appl. No.:

16/532449

Inventors:

- Leesburg VA, US
Rohyt Belani - New York NY, US
Scott Greaux - Glenmont NY, US
William Galway - Scotch Plains NJ, US
Douglas Hagen - Amherst NY, US

Assignee:

Cofense Inc - Leesburg VA

International Classification:

H04L 29/06
G06F 16/35
H04L 12/58
G06F 21/55
G06F 21/00

Abstract:

The present invention relates to methods, network devices, and machine-readable media for an integrated environment for automated processing of reports of suspicious messages, and furthermore, to a network for distributing information about detected phishing attacks.

US Patent:

20180191754, Jul 5, 2018

Filed:

Feb 26, 2018

Appl. No.:

15/905784

Inventors:

- Leesburg VA, US
Rohyt Belani - New York NY, US
Scott Greaux - Glenmont NY, US
William Galway - Scotch Plains NJ, US
Douglas Hagen - Amherst NY, US

Assignee:

Cofense Inc. - Leesburg VA

International Classification:

H04L 29/06
G06F 17/30
H04L 12/58

Abstract:

The present invention relates to methods, network devices, and machine-readable media for an integrated environment for automated processing of reports of suspicious messages, and furthermore, to a network for distributing information about detected phishing attacks.

US Patent:

20170237776, Aug 17, 2017

Filed:

May 1, 2017

Appl. No.:

15/584002

Inventors:

- Leesburg VA, US
Rohyt Belani - New York NY, US
Scott Greaux - Glenmont NY, US
William Galway - Scotch Plains NJ, US
Douglas Hagen - Amherst NY, US

Assignee:

PhishMe, Inc. - Leesburg VA

International Classification:

H04L 29/06
G06F 17/30

Abstract:

The present invention relates to methods, network devices, and machine-readable media for an integrated environment for automated processing of reports of suspicious messages, and furthermore, to a network for distributing information about detected phishing attacks.

US Patent:

20160301705, Oct 13, 2016

Filed:

Dec 31, 2015

Appl. No.:

14/986515

Inventors:

- Leesburg VA, US
Rohyt Belani - New York NY, US
Scott Greaux - Glenmont NY, US
William Galway - Scotch Plains NJ, US
Douglas Hagen - Amherst NY, US

Assignee:

PhishMe, Inc. - Leesburg VA

International Classification:

H04L 29/06
G06F 17/30
H04L 12/58

Abstract:

The present invention relates to methods, network devices, and machine-readable media for an integrated environment for automated processing of reports of suspicious messages, and furthermore, to a network for distributing information about detected phishing attacks.

US Patent:

20160164898, Jun 9, 2016

Filed:

Feb 15, 2016

Appl. No.:

15/044099

Inventors:

- Leesburg VA, US
Aaron Higbee - Leesburg VA, US
Scott Greaux - Glenmont NY, US

Assignee:

PhishMe, Inc. - Leesburg VA

International Classification:

H04L 29/06

Abstract:

Described herein are methods, network devices and machine-readable media for preventing the malicious use of phishing simulation records. A phishing simulation record of an individual is associated with an e-mail alias of the individual. Further, such e-mail alias may be deactivated after phishing simulations have been completed. Therefore, even if an attacker were able to identify individuals most susceptible to phishing attacks, the attacker will be unable to send any phishing attacks to those individuals since their e-mail aliases will have been deactivated.

US Patent:

20150205953, Jul 23, 2015

Filed:

Jan 21, 2014

Appl. No.:

14/160443

Inventors:

- Chantilly VA, US
Aaron Higbee - Leesburg VA, US
Scott Greaux - Glenmont NY, US

Assignee:

PhishMe, Inc. - Chantilly VA

International Classification:

G06F 21/55

Abstract:

Described herein are methods, network devices and machine-readable media for preventing the malicious use of phishing simulation records. Phishing simulation records often times can reveal which individuals are most susceptible to phishing attacks. In the event that an attacker gains access to these records, the attacker can exploit such information to send phishing attacks to those individuals who are the most susceptible. To address such vulnerabilities, a phishing simulation record of an individual is only associated with an e-mail alias of the individual. Further, such e-mail alias may be deactivated after phishing simulations have been completed. Therefore, even if an attacker were able to identify individuals most susceptible to phishing attacks, the attacker will be unable to send any phishing attacks to those individuals since their e-mail aliases will have been deactivated.