> For the complete documentation index, see [llms.txt](https://clonex.gitbook.io/clonex-documentation/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://clonex.gitbook.io/clonex-documentation/products/publish-your-docs.md).

# Cyberattack Simulations

CloneX offers a service to test how employees handle **vishing attacks**, a form of phishing done via phone calls. With permission, we use the voice of **someone trusted, like a manager, to simulate a cloned voice call**. The targeted employee, unaware of the test, will receive a call requesting sensitive information or urgent actions.

<figure><img src="/files/fJ26c1ONggcC6q2jNC9S" alt=""><figcaption><p>Real Life - Simulation</p></figcaption></figure>

## Purpose

• Test if employees can detect vishing attempts.

• Identify weaknesses in handling both AI-based and human-led threats.

• Provide general prevention training for all vishing scenarios, whether done with AI-generated voices or real callers.

## How It Works

1\. Simulated Call: The employee gets a call using the manager’s cloned voice or a controlled script.

2\. Scenario: The call requests confidential information or urgent actions.

3\. Evaluation: We analyze the employee’s response and provide a report with recommendations.

## How to Detect Suspicious Calls

• Ask specific questions only the real person would know.

• Be cautious if the caller is unusually urgent or behaves differently.

• Verify the request via another communication channel.

## Why It Matters

**Not all vishing attacks** involve AI-generated voices. Real attackers often rely on urgency and manipulation to extract information. CloneX focuses on prevention strategies that protect against both AI-driven and human-led attacks.

## Next Steps

If a call feels suspicious, employees should:

• Pause and assess the situation before acting.

• Report the call immediately.