I've cloned many sites, and they've looked convincing, but I've always struggled with probably the most important part. Delivery.
How do you Deliver your social engineering attack?
In many of the books about social engineering and or hacking I've read they've used or mentioned an email spoofing type deal; and I'm sure it used to work fine. But since the crack down of email spoofing through major email services like gmail, hotmail and the like, what works for you?
Do you have some provider that allows you to make convincing spoof emails? I'd love your feedback.