To create a file tracking or attachment campaign, start by selecting or creating a phishing email template that will include a trackable attachment. Attachments can be sent as either PDF or HTML files. If you are using a prebuilt attachment template, you can find attachment-ready templates in the Template Library. If you are creating your own attachment, use the Manage Attachments page to define the attachment name, filename, locale, and HTML body. Make sure the attachment is visible in the phishing email template editor so it can be selected when editing your template.
Next, open the phishing email template you want to use and go to the template editor. Under Tracking Settings, enable Track an Attachment. Then choose the attachment from the Select attachment dropdown, choose the file type, and save the template. You can also use the Download Preview option to review the attachment before sending the campaign. Trackable attachments can be used as part of a normal phishing email, or they can be used to create an attachment-only style campaign.
Once the template is ready, create the campaign by navigating to Tests / Campaigns > Create Campaign and selecting Phishing Campaign. In the campaign wizard, choose the schedule, select the target group or groups, and then select the phishing template that has attachment tracking enabled. Review the campaign settings and click Finish to create the campaign.
Attachment tracking works through hook links inside the attached file. When a target opens the attachment and clicks or loads one of the links inside it, PhishingBox records an Opened Attachment action. Simply downloading the attachment does not record an action by itself, so the attachment should include a link or call-to-action that the target can interact with. Attachment activity may also count toward the Data Extended metric