Phishing: Sender Display Name Matches Recipient Name from gmail.com Sender

Ibrahim Saud@tektrix

•updated Jun 24, 2026•1•0•6

Detects inbound emails from 'gmail.com' where the sender's display name closely matches the recipient's local username part. This pattern is commonly used in business email compromise (BEC) and phishing attacks to impersonate colleagues or known contacts.