PhishMe is offering a service that lets IT administrators identify the most gullible message recipients.

The service, set to be released Tuesday, lets IT departments "emulate real phishing attacks," reports InformationWeek. Duped employees are then redirected to internal corporate training materials or presented with a built-in educational message or comic strip.

The cost ranges from about $4,800 for a single run at a small company to about $48,000 per year for large enterprises, but that can be small potatoes compared to victim losses.

IT Business Edge blogger Carl Weinschenk notes that scammers are increasingly targeting C-level executives in a phishing derivative known as whaling. In April, over a thousand executives fell victim to phony subpoena e-mails that redirected them to a malicious Web site.