Skip to main content
The first time you open the console, a window titled Run your first simulated phone attack appears. It says: “It takes about five minutes, and no real person is called. You are the one being called, right here in your browser.” Click Start to follow the four-step checklist, or Skip for now to do it later. The checklist sits at the top of the Red Team tab under the heading Get started: run your first simulated attack. A pill in the top bar, Get started, shows how many of the four steps are done and brings the checklist back if you skipped it.
Before you start: you need a DeepBlocker login (see Getting an account) and a browser with a microphone.

Steps

1

Add a voice

“Record or clone one voice. Your attacker speaks with it.”Click Add a voice on the checklist. It opens the Voices page. Click Clone a voice. The window says Record a short sample, or upload one. Fill in Whose voice is this? with the full name of the person whose voice it is, pick the Voice engine and Voice language, then read the text under Read this out loud while you click Record. You can upload a file instead. Click Save voice clone.The checklist ticks this step once your workspace holds one cloned voice. If you would rather not clone a voice yet, you can still give your attacker one of the six ready-made voices in the next step; the step stays unticked but nothing else is blocked.
2

Create an attacker

“A caller persona that uses your voice.”Click Create an attacker. Give the attacker a name, a role and a company. Under Voice source choose your cloned voice or a Ready-made voice. Write The opening line, the first sentence the person hears. Pick a Tone of voice. Click Create attacker.
3

Build a campaign from a template

“Pick one of three ready scenarios and your attacker.”Click New campaign. Under Choose how to run it, pick Single call. The scenario picker shows a Recommended to start group with three scenarios: CEO stolen phone, IT help desk reset, and Bank fraud team. Pick one.The wizard then has four steps: Who calls, Who is called, From where and when, Authorise and launch. Choose your attacker on Who calls. You do not need to add any people or launch for a test call: click Save as draft at any point and the campaign exists.
4

Run your first test call

“In your browser, nobody is dialled. This is your first win.”Click Run a test call. It opens the test call page for your newest campaign. When Answer the call appears, click it and allow the microphone. The attacker speaks first. Talk back as one of your staff would. Click Hang up when you are done.The full page, button by button, is on Take a test call in your browser.

What happens next

When all four steps are done the checklist shows You’re all set and the message “You ran your first simulated attack. From here, add your people and launch a real campaign when you’re ready.” Click Done. Your next three pages:

Add the people you will call

One at a time or by CSV, with consent recorded.

Before you test anyone

The authorisation and consent gates.

Build a campaign

The wizard, step by step, for a real launch.

Problems

It shows once, on your first visit. Use the Get started pill in the top bar instead; it opens the checklist.
It disappears once all four steps are done. The pages behind each step are still there: Voices, Attackers and Campaigns in the Red Team tab.
Reload the console. The checklist reads your counts once per visit.
The clone window says: “This browser cannot record audio. Use Chrome or Safari, or upload a file.” Upload a short recording instead.