If you have to simulate a phishing attack on your org, at least try to get something useful from it

Step 1: let the higher-ups know

Just when it looked as if the US Democratic National Committee (DNC) had finally got one over on the phishing hackers that had been owning it since 2016, the triumph was torn away by a moment of rebellious fakery."