These campaigns typically involve sending fake phishing emails to employees, mimicking common tactics used by cybercriminals. The emails may contain links, attachments, or requests for sensitive information. Employees who engage with these emails are then provided with immediate feedback and training resources to improve their awareness.