With the news that Chinese Hackers are using 42,000 domains in a huge phishing campaign I have been getting asked a lot: What does it take to send out a phishing campaign? So I wrote a guide (with a few pieces left out): How to send a great phishing campaign