Recreate Attack

With Recreate Attack, you can turn real phishing emails into safe, realistic simulations in minutes - helping your employees learn from the threats that matter most, while keeping your organization secure. This allows you to quickly adapt to emerging real threats your organization is facing and train your employees accordingly.

How it works

Recreate Attack is a new capability in Template Studio. Instead of starting from a blank template or a generic library item, you can:

1. Upload a screenshot of a real phishing email
2. Let AI recreate the email structure and content
3. Review and fine-tune the result
4. Use it in a phishing simulation

All in a matter of minutes.

Demo walkthrough

Instructions

1. Go to Phishing Simulation / Template Studio and select + Create custom template.

   

2. Select Recreate from a real phishing mail. A new dialog window will open.

   

3. By default, the template will be created in your organization’s standard language. You can add additional languages from the dropdown menu. The AI will create automated translated versions of this template for you.
4. Upload a screenshot of a phishing email you want to recreate. This could be an impersonation attempt, a credential-harvesting email, or any other type of phishing message you want employees to learn from. After selecting your image, Recreate Attack will begin analyzing the contents, remove or neutralize all malicious elements and recreate the email as a safe draft that you can then refine. A notification at the bottom right will keep you informed of the progress, which can take a few minutes. Note that the template will be given a name based on the content of the screenshot as well.

Review and customization

Once the process has finished, you can review and customize the template that has been created. To preview the template, simply select the eye icon in its row. Furthermore, you can select the pen icon to customize your template by:

• editing text
• replacing placeholders or images
• improving realism by fine-tuning sender names, addresses and other elements

Once you’re happy with your template, you can save it and use it when setting up a phishing simulation!

Limitations

The same limitations from QuickEdit apply. This means specifically:

• insert new layout elements
• add images where the original template didn’t include them
• change formatting such as fonts
• add external links or QR codes
• add or customize learning hints

Additional information

Why this matters

Train on real threats

Employees learn best from examples that feel familiar. Recreate Attack lets you train on the exact types of phishing emails your organization is seeing today - not last year.

Respond faster

What used to take hours or days can now be done in minutes. That means faster reaction to emerging threats and quicker reinforcement for employees.

Keep simulations safe

All recreated emails are fully sanitized. No real malicious links or payloads are ever included. Simulations remain safe at all times. And while you can customize the sender domain, all domains are fully controlled by SoSafe.

What Recreate Attack is - and isn’t

Recreate Attack is:

• A fast way to turn real phishing emails into simulations
• A self‑service workflow inside Template Studio
• Designed for realism, speed, and control

Recreate Attack is not:

• A live threat detection or monitoring tool
• An automatic campaign launcher
• A way to send real malicious content

Open Beta: What to expect

Recreate Attack is currently available as an Open Beta.

The following features are available:

• Screenshot-based phishing email recreation
• Automated translations
• Template customization

Some advanced automation - such as automated learning hint generation, and more advanced sender modeling - is planned for later.