Lucy 2.9.1

Lucy 2.9.1 patch contains a fix for sending Awareness Website links automatically, after attack is successfully performed. If you downloaded or upgraded Lucy 2.9 on Mar 21 or later, then your version already contains all necessary fixes.

Lucy 2.9

Lucy 2.9 is released! You can download VMware ESXi, VMware Workstation, VirtualBox images and Debian/Ubuntu installer script on the Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • Question titles support for quiz-based awareness websites
  • Licensing reports – see what spends your licensing points
  • New version of Malware Toolkit
  • Support 3rd-level domains
  • Additional checks for valid language settings
  • Link press statistics – show number of link clicks for individual recipients
  • Anti-virus/firewall check is optional now
  • Take default language as source when adding translations
  • Ability to insert link to awareness website from scenario landing page
  • Test run – ability to select scenarios to test and display data in statistics
  • Campaign backup with all data (recipients, visits, collected data, etc)
  • Improve graphics quality in reports
  • Check Lucy accessibility in Performance Test
  • Language selector for landing/message preview
  • Campaign checks help – get additional info when some of campaign checks fails
  • Template list speedup
  • Lots of extra features & bugfixes

Lucy 2.8

Lucy 2.8 is released! You can download VMware ESXi, VMware Workstation, VirtualBox images and Linux installer script on Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • Starting from this version, shell installer supports the following platforms:
    • Debian 7 (wheezy) – 32 bit and 64 bit
    • Debian 8 (jessie) – 32 bit and 64 bit
    • any other 64-bit Linux with kernel version 3.10 or more
  • Uploading data to interactive console – use Console Interactive file template to upload custom executables to targets and check their output in Lucy’s Interactive Session
  • Lucy speaks your language! Dutch, German, French, Italian, Portuguese, Russian, Spanish, Turkish and Ukrainian interface languages are now available.
  • Lucy hardening – now Lucy stores your data more securely
  • Admin SSL improvement – generate CSR and SSL certificates for Lucy admin part easily
  • “Check Update Now” button – Lucy checks for updates periodically and this button may be useful if you need to check if the update is available immediately, without waiting
  • Custom archive name support
  • New archiving formats support – rar, 7z, cab, jar
  • UI improvements
  • Show current license counter values on license page
  • Reboot button
  • Multiple bugs fixed

Lucy 2.7

Lucy 2.7 is released! You can download VMware ESXi, VMware Workstation, VirtualBox images and Debian/Ubuntu installer script on the Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • USB Attack support – check if your employees will run executable files from USB sticks
  • Licensing model adjustment – decrease the amount of used recipients on message submission
  • Reporting – selectable period for daily and hourly stats charts
  • Optional blacklist check in Spam Checker – Spam Checker now checks only 10 black lists by default
  • Successful attack options – configure how Lucy will count successful attacks
  • Configurable SMTP server name
  • Protection against instant link clicks from Firewall/Antivirus software
  • Ability to select all available templates for download
  • Add wildcard subdomain automatically when registering a domain through Lucy
  • Security improvements
  • Multiple bugfixes

Lucy 2.6 Messaging Issue

Please reboot your system after upgrading Lucy to 2.6! Most of our clients report that Lucy is unable to send messages after the upgrade. The 2.6 version has big changes in messaging system and it seems that they are not applied correctly during the upgrade. If you spot the same issue on your Lucy instance, please restart the system in order to fix it.

If the problem persists after the reboot, feel free to contact us.

Lucy 2.6

Wow! The next big update is there! Meet Lucy 2.6 with new useful features! You can download VMware ESXi, VMware Workstation, VirtualBox images and Debian installer script on the Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • SMS phishing support – check if your employees are vulnerable to phishing text messages
  • Multi-language scenarios – use different languages within a single scenario
  • Report sections improvement – now you have more control over report template (for example, select particular charts that should appear in report)
  • Victim side optimizations – the web portal for attacked users became up to 300% faster, now you can serve up to 3 times more recipients on the same hardware
  • Offline updates became more “offline” – there is no need to access Debian repositories anymore
  • Dozens of bugfixes and minor improvements

Lucy 2.5

Lucy 2.5 is released! You can download VMware ESXi, VMware Workstation, VirtualBox images and Debian/Ubuntu installer script on the Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • Major website copying improvement (should be compatible with almost all non-AJAX sites)
  • Custom SSL certificates for admin interface
  • Reset stats button in campaign
  • Performance test improvements
  • List of downloaded files for each recipient
  • Updated Malware Testing Toolkit
  • Documentation additions

Stay tuned!

Lucy 2.4

Lucy 2.4 is available! You can download VMware ESXi, VMware Workstation, VirtualBox images and Debian/Ubuntu installer script on the Lucy website, or use a pre-configured AMI on Amazon EC2 instance (search for “lucy” in Community AMIs when creating an instance). If you are using a commercial license, you can update the system through the “Update” section in Lucy.

Update notes:

  • New attachment template – run commands through Word macros
  • New scenario template – iTunes account
  • Interactive console tool improvement
  • Spam Checker: blacklist analysis
  • DKIM support and signature generation
  • Mail sending improvements – restart campaign, send mails to additional recipients immediately
  • Generate reports in background
  • Text email body support
  • Email subject in email templates
  • “Delete All Attachments” button in email editor
  • Template compatibility version support
  • Restore 404 page to default
  • Ability to replace existing templates when installing them from “Download Templates” menu
  • Ability to quit text inputs from setup script
  • Change user’s password in console tools
  • Custom Debian mirror – now Lucy uses Debian mirror with the same IP as the update server
  • Lots of other additions and bugfixes