Phishing attack simulation payload editor is extremely broken

Question

So we want to run training exercises with our employees, but the existing templates provided need to be tweaked slightly.

Should be easy to simply copy a template, change the 1 or 2 words that we need to change, and then save and launch right?

No.

Taking the existing template for "keep office password" and simply changing even 1 word, loses all the formatting of the email.

Even just using the visual editor to (for example) type "Office 365" and center it, then go into the "code" view, and back to the "text" view causes the formatting of centering to be removed.

It seems like most the premade templates work (though some prompt if the user trusts the sender) - but it seems it's simply not possible (at least easily?) to make a custom template that actually displays as desired.

What is going on?

Answer 1

As an update, it appears the editor for both payload and login pages is very flakey.

Sometimes it's broken and cannot keep formatting, other times it works.

If it's broken, best thing is to come back to it some hours later (personally I do my building on externally first before pasting into the editor).

I have zero clue how an editor can be broken sometimes and others not.

Answer 2

I basically experienced the same thing.

After failed attempts to use nicely formatted div's etc.. I simply typed one word, formatted it red bold and centered using the visual editor. Went into code view, changed nothing at all, went back to text view - and formatting had been removed.

The login page editor seems to work better (ignoring the fact it removes all pretty indentations etc..) but this payload editor seems to be very very broken.

It briefly seemed to work and I was able to build a nice looking payload, though upon receiving the mail, some graphics had been removed. After this weekend I looked into it to fix it, and the issue of it stripping all formatting etc.. has returned. When I view the preview, everything looks good, but viewing the code and back to text again, everything is removed.

I checked the other community link that was provided and there is nothing there, nor do I expect any assistance honestly.

Answer 3

This isn't helpful to the OP, but I'm also having the same issue with the editor being completely messed up. I can't even highlight text in the 'Text' tab and use the formatting options to change the font size or font type. Nothing happens.

If I highlight text and choose to do something like center-align it, and then I go to the 'Code' tab and back to the 'Text' tab, it removes that and it's back to left-aligned.

If I try to change the font style or center-align it in the 'Code' tab, it gets stripped out when I go back to the 'Text' tab. (this is all using in-line HTML code, btw).

My original HTML also had code to add a gray border, and a stylized button, but those also get stripped out.

At the moment, this is completely worthless to me unless all I want to do is send a simple text email, which will "phish" nobody.

Answer 4

I have exactly the same issue. Wondering if your issue is fixed.

Answer 5

Hi Michael Simpson4,

Good day!

Thank you for bringing the issues with the phishing attack simulation payload editor to our attention. I understand how frustrating it must be to encounter these problems, especially when you are trying to run important training exercises with your employees.

I am truly sorry for the inconvenience this has caused. It should indeed be straightforward to tweak existing templates, and I can imagine how disruptive it is when even minor changes lead to formatting issues.

Kindly note that Microsoft has specific support channel resource for certain different support scope and attributes. For your concern, we have a dedicated team with special expertise in security and purview related queries. To address this, I recommend reaching out to the Microsoft Q&A community Ask a question - Microsoft Q&A and post your query with tag Microsoft Purview

Additionally, you might find it helpful to post your issue on the **** Microsoft Defender for Identity | Microsoft Community Hub. I believe they will give you accurate and efficient solution for your concern.

I apologize for any inconvenience this redirection may cause, but I believe it’s the best way to resolve your concerns effectively.

Thank you for your precious time and understanding. For other concerns, please do not hesitate to add your post in the Microsoft Community Team.  

Stay safe and healthy. Have a nice day!

Sincerely,

Luckie Shi | Microsoft Community Moderator